dac24fe8adc3e42acbdf07f5351d93e0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
dac24fe8adc3e42acbdf07f5351d93e0_NeikiAnalytics.exe
Size 947KB
Sample240603-th5wpsch98
SHA256 21ed4688b8cc979243160b91a9ac1a6a583b58ab22cd8019ff0c50bc7d89a299
MD5 dac24fe8adc3e42acbdf07f5351d93e0
SHA1 9dbbe638e33d1419c88f6bf49e09ae5182d911ba
SHA512 6da0901ea906e4675f2b8c17e087b9d98baaaf9bd6bb0c55c8f75fabedac585068708e36564a6e9926eca35bebb4abe4af6c1c666dc21e76583f16a1036e0d0c
SSDEEP 24576:UNthcGVL6hBd1HEqP8KRRgWy/Magicb80Bwu6av:sB6rzHELQRgD0agicb80Bwu6av
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dac24fe8adc3e42acbdf07f5351d93e0_NeikiAnalytics.exe

File Explorer

dac24fe8adc3e42acbdf07f5351d93e0_NeikiAnalytics.exe

.dll 947KB

dac24fe8adc3e42acbdf07f5351d93e0_NeikiAnalytics.exe

IMPHASH 743950e19d0f389c192ea37ff5cbd215
SHA256 21ed4688b8cc979243160b91a9ac1a6a583b58ab22cd8019ff0c50bc7d89a299
MD5 dac24fe8adc3e42acbdf07f5351d93e0
SHA1 9dbbe638e33d1419c88f6bf49e09ae5182d911ba
SHA512 6da0901ea906e4675f2b8c17e087b9d98baaaf9bd6bb0c55c8f75fabedac585068708e36564a6e9926eca35bebb4abe4af6c1c666dc21e76583f16a1036e0d0c
SSDEEP 24576:UNthcGVL6hBd1HEqP8KRRgWy/Magicb80Bwu6av:sB6rzHELQRgD0agicb80Bwu6av
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

448319

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Drydock\FingerPrint-2.2\ThirdParty\Win32\WinSparkle\Win32\Release\WinSparkle.pdb

wininet

InternetCloseHandle InternetReadFile InternetOpenUrlA InternetOpenW

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

kernel32

InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW GetModuleFileNameA FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetStringTypeW GetACP GetOEMCP IsValidCodePage GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale SetFilePointer GetConsoleCP GetConsoleMode FreeLibrary LoadLibraryW SetStdHandle SetHandleCount CreateFileW FlushFileBuffers GetVersionExW GetEnvironmentVariableW DebugBreak CompareStringW FormatMessageW GetFileAttributesW GetTempPathW FindFirstFileW FindClose WaitForMultipleObjects OutputDebugStringW SetCurrentDirectoryW FreeConsole GetConsoleScreenBufferInfo ReadConsoleOutputCharacterA SetConsoleCursorPosition FillConsoleOutputCharacterW WriteConsoleA SetErrorMode GetCommandLineW MulDiv GetLocaleInfoW GetStdHandle WriteFile ExitProcess HeapSize GetProcAddress SetLastError TlsFree TlsSetValue TlsGetValue TlsAlloc HeapDestroy HeapCreate IsProcessorFeaturePresent IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess LCMapStringW RtlUnwind GetCPInfo HeapReAlloc HeapAlloc GetCommandLineA CreateThread GetCurrentThreadId ExitThread GetSystemTimeAsFileTime HeapFree DecodePointer EncodePointer MultiByteToWideChar InterlockedExchange InterlockedDecrement InterlockedIncrement WideCharToMultiByte ReadFile GetFullPathNameW GetModuleHandleW EnumResourceNamesW ResumeThread CloseHandle CreateEventW RaiseException Sleep SetEvent WaitForSingleObject DeleteCriticalSection LockResource GetModuleFileNameW SizeofResource InitializeCriticalSection LoadResource FindResourceA LocalFree OutputDebugStringA GetLastError FormatMessageA EnterCriticalSection LeaveCriticalSection GetDriveTypeW SetEnvironmentVariableA SetEnvironmentVariableW GetCurrentDirectoryW SetEndOfFile WriteConsoleW GetProcessHeap

user32

GetMessageW SetMenu DrawFrameControl DrawIconEx DestroyCursor GetWindowDC BeginPaint EndPaint MapWindowPoints FindWindowExW ChangeDisplaySettingsW EnumDisplaySettingsW GetDlgItem CreateDialogParamW UnhookWindowsHookEx SetWindowsHookExW CallNextHookEx GetActiveWindow GetAsyncKeyState VkKeyScanW GetMessageTime EndDeferWindowPos BeginDeferWindowPos GetWindow FillRect GetUpdateRgn GetSysColor InflateRect IsWindowVisible IsWindowEnabled IsDialogMessageW CallWindowProcW DeferWindowPos ClientToScreen ScreenToClient UpdateWindow RedrawWindow SetParent GetParent WindowFromPoint IsWindow ScrollWindow EnableScrollBar SetScrollInfo GetScrollInfo SetCursorPos SetCursor ValidateRect DrawFocusRect GetCapture ReleaseCapture SetCapture EnableWindow GetFocus SetFocus FlashWindow GetMenu AdjustWindowRectEx GetClientRect SetWindowRgn DrawMenuBar EnableMenuItem GetSystemMenu SetWindowPos GetDesktopWindow SetWindowLongW GetWindowLongW GetWindowPlacement IsIconic IsZoomed ShowWindow BringWindowToTop SetWindowTextW MoveWindow CreateDialogIndirectParamW GetWindowRect GetSystemMetrics CreateIconIndirect ReleaseDC GetIconInfo DestroyIcon GetKeyState LoadCursorW MsgWaitForMultipleObjects KillTimer SetTimer PeekMessageW DefWindowProcW DestroyWindow SendMessageW UnregisterClassW PostThreadMessageW MessageBoxW CreateWindowExW RegisterClassW PostMessageW SetActiveWindow SetForegroundWindow GetClassNameW GetWindowTextW GetWindowTextLengthW DispatchMessageW TranslateMessage InvalidateRect GetDoubleClickTime SystemParametersInfoW PtInRect OffsetRect DrawTextW CopyRect LoadIconW GetCursorPos LoadBitmapW LoadImageW GetDC

advapi32

RegQueryValueExA RegCreateKeyExA RegOpenKeyExA RegSetValueExA RegCloseKey

ole32

OleInitialize OleUninitialize OleLockRunning OleSetContainedObject OleRun CoCreateInstance

oleaut32

SafeArrayCreate SysAllocString SafeArrayUnaccessData SafeArrayDestroy SafeArrayAccessData SafeArrayCreateVector SysFreeString VariantInit

comctl32

ImageList_Add ImageList_Destroy ImageList_Create ord17 ImageList_Replace

gdi32

CreateBitmap GetObjectW RoundRect Rectangle Polyline PolyPolygon Polygon Ellipse MaskBlt CreateCompatibleBitmap CreateCompatibleDC DeleteDC SelectObject BitBlt SetPolyFillMode SetPixel Arc Pie GetPixel ExtFloodFill GetBkColor SetMapMode SelectClipRgn ExtSelectClipRgn GetClipBox SetStretchBltMode LineTo MoveToEx SetBkColor SetTextColor SetBkMode ExtTextOutW SetBrushOrgEx SetROP2 GetCharABCWidthsW GetTextExtentExPointW SetViewportExtEx SetWindowExtEx SetViewportOrgEx SetWindowOrgEx StretchBlt StretchDIBits CreateDIBSection GetDIBits GetDIBColorTable CreateDIBitmap CreatePatternBrush CreateHatchBrush ExtCreatePen SaveDC RestoreDC GetRegionData CombineRgn GetRgnBox EqualRgn PtInRegion RectInRegion GetStockObject CreateSolidBrush CreatePen GetDeviceCaps CreateFontIndirectW GetOutlineTextMetricsW CreateRectRgn ExcludeClipRect GetTextMetricsW GetTextExtentPoint32W GdiFlush OffsetRgn DeleteObject ExtCreateRegion

shell32

ExtractIconW ExtractIconExW DragFinish DragQueryPoint DragQueryFileW DragAcceptFiles SHGetSpecialFolderLocation SHGetPathFromIDListW SHGetMalloc ShellExecuteExW

Name

.text

Size

609KB

Virtual Size

609KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

224KB

Virtual Size

223KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

22KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

13B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

77KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

dac24fe8adc3e42acbdf07f5351d93e0_NeikiAnalytics.exe

wininet

version

kernel32

user32

advapi32

ole32

oleaut32

comctl32

gdi32

shell32

generic