44ac92bfda4c0280296229afe8a25ff0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
44ac92bfda4c0280296229afe8a25ff0_NeikiAnalytics.exe
Size 122KB
Sample240603-tce34abe4z
SHA256 f59dbabd4643670962755e096b2e5d321ca6402ec2d0affe21bbfc4f8c9a438b
MD5 44ac92bfda4c0280296229afe8a25ff0
SHA1 cbe9cea6bebb0f7f98edafe329e8c9522d9ea1f5
SHA512 c5b4e88b2c8d85cd55e567321ec22c1b65f18ee65124129e002db7c1b699e7780b5a3623f42c3fd501d9216eef63793d163c07fc5a1e4b7112a88674d2c33949
SSDEEP 3072:MYQLBIrp6oTYkoeSNFfHheo3NKOlILOBev/L89:nQGrokdShFsOlILOBev/L89
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44ac92bfda4c0280296229afe8a25ff0_NeikiAnalytics.exe

File Explorer

44ac92bfda4c0280296229afe8a25ff0_NeikiAnalytics.exe

.dll 122KB

44ac92bfda4c0280296229afe8a25ff0_NeikiAnalytics.exe

IMPHASH dd2cd02e0621f4fd8d844ee96652185b
SHA256 f59dbabd4643670962755e096b2e5d321ca6402ec2d0affe21bbfc4f8c9a438b
MD5 44ac92bfda4c0280296229afe8a25ff0
SHA1 cbe9cea6bebb0f7f98edafe329e8c9522d9ea1f5
SHA512 c5b4e88b2c8d85cd55e567321ec22c1b65f18ee65124129e002db7c1b699e7780b5a3623f42c3fd501d9216eef63793d163c07fc5a1e4b7112a88674d2c33949
SSDEEP 3072:MYQLBIrp6oTYkoeSNFfHheo3NKOlILOBev/L89:nQGrokdShFsOlILOBev/L89
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

84204

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

flutter_windows

FlutterDesktopPluginRegistrarGetView FlutterDesktopTextureRegistrarMarkExternalTextureFrameAvailable FlutterDesktopTextureRegistrarUnregisterExternalTexture FlutterDesktopTextureRegistrarRegisterExternalTexture FlutterDesktopMessengerUnlock FlutterDesktopMessengerLock FlutterDesktopMessengerIsAvailable FlutterDesktopMessengerRelease FlutterDesktopMessengerAddRef FlutterDesktopMessengerSetCallback FlutterDesktopMessengerSendResponse FlutterDesktopMessengerSendWithReply FlutterDesktopMessengerSend FlutterDesktopRegistrarGetTextureRegistrar FlutterDesktopPluginRegistrarGetMessenger FlutterDesktopPluginRegistrarUnregisterTopLevelWindowProcDelegate FlutterDesktopPluginRegistrarRegisterTopLevelWindowProcDelegate FlutterDesktopViewGetHWND FlutterDesktopPluginRegistrarSetDestructionHandler

kernel32

IsDebuggerPresent InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive MultiByteToWideChar GetModuleHandleW

user32

GetCursorPos CreateWindowExW SetWindowLongPtrW DestroyIcon SendMessageW UnregisterClassW GetWindowLongPtrW DestroyWindow DefWindowProcW RegisterWindowMessageW LoadImageW SetMenuItemInfoW InsertMenuItemW TrackPopupMenu AppendMenuW DestroyMenu CreatePopupMenu GetAncestor GetClientRect SetForegroundWindow BringWindowToTop IsIconic IsWindowVisible SetWindowPos ShowWindow IsWindow PostMessageW RegisterClassW

shell32

Shell_NotifyIconW

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xbad_function_call@std@@YAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?width@ios_base@std@@QEAA_J_J@Z ?width@ios_base@std@@QEBA_JXZ ?flags@ios_base@std@@QEBAHXZ ?good@ios_base@std@@QEBA_NXZ ?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA ?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_terminate __std_type_info_destroy_list memcmp memcpy __std_type_info_compare memmove memset __current_exception __current_exception_context __C_specific_handler __std_exception_copy __std_exception_destroy _CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _cexit terminate _invoke_watson _invalid_parameter_noinfo_noreturn

api-ms-win-crt-math-l1-1-0

ceilf

api-ms-win-crt-heap-l1-1-0

malloc free _callnewh