b4888f76568357d80b42682f32d0cfc0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
b4888f76568357d80b42682f32d0cfc0_NeikiAnalytics.exe
Size 5.4MB
Sample240603-vkn7eada8z
SHA256 a93b1725802b61f22d96bf4bcb897b5bf557ea43121fc332acf8961627ab6881
MD5 b4888f76568357d80b42682f32d0cfc0
SHA1 3784e4c54f681724b63157beb8f8c46d8a64471c
SHA512 e7a949639da594b67a039443f10f1300cf7bb61c049fd1bc6c60d2d20d46abd2b42008bce51280cbaaa5049a558a1fadbffe9147bcb4a0e5a2b29281f776c8e1
SSDEEP 98304:NuLgywiN1ah6HcG0UJrN7SDgndrHZDMeaNNjt0CKKBgY2r71pZ/APaOR72HgQo0f:s7wq1W6HqULS8djZDTaNNeCKVP5ORsg
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4888f76568357d80b42682f32d0cfc0_NeikiAnalytics.exe

File Explorer

b4888f76568357d80b42682f32d0cfc0_NeikiAnalytics.exe

.exe 5.4MB

b4888f76568357d80b42682f32d0cfc0_NeikiAnalytics.exe

IMPHASH a1f6f100bff4507a3332f3f0cdfc24f5
SHA256 a93b1725802b61f22d96bf4bcb897b5bf557ea43121fc332acf8961627ab6881
MD5 b4888f76568357d80b42682f32d0cfc0
SHA1 3784e4c54f681724b63157beb8f8c46d8a64471c
SHA512 e7a949639da594b67a039443f10f1300cf7bb61c049fd1bc6c60d2d20d46abd2b42008bce51280cbaaa5049a558a1fadbffe9147bcb4a0e5a2b29281f776c8e1
SSDEEP 98304:NuLgywiN1ah6HcG0UJrN7SDgndrHZDMeaNNjt0CKKBgY2r71pZ/APaOR72HgQo0f:s7wq1W6HqULS8djZDTaNNeCKVP5ORsg
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25599

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

sfxcab.pdb

msvcrt

__setusermatherr _initterm __getmainargs __initenv exit _cexit _adjust_fdiv _exit _c_exit strncpy strstr _strlwr strrchr _stricmp __p__commode __p__fmode __set_app_type _except_handler3 _controlfp _XcptFilter _snprintf sprintf strchr _strnicmp _vsnprintf

advapi32

InitializeAcl AddAccessAllowedAce SetSecurityDescriptorDacl CryptAcquireContextA CryptGenRandom CryptReleaseContext AllocateAndInitializeSid OpenProcessToken GetTokenInformation GetLengthSid InitiateSystemShutdownA InitializeSecurityDescriptor

kernel32

CreateThread GetFileSize ExpandEnvironmentStringsA CreateProcessA GetExitCodeProcess InitializeCriticalSectionAndSpinCount LocalFileTimeToFileTime SetFileTime SetEndOfFile CreateEventA QueryDosDeviceA GetDiskFreeSpaceA GetSystemTime QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentDirectoryA GetProcessHeap CopyFileA SetFileAttributesA DosDateTimeToFileTime SetEvent GetVersionExA ReadFile SetFilePointer MoveFileExA RemoveDirectoryA GetLastError CreateDirectoryA GetTickCount SetErrorMode FreeLibrary GetProcAddress LoadLibraryA GetSystemDirectoryA CloseHandle DeviceIoControl CreateFileA GetDriveTypeA HeapFree FormatMessageA LeaveCriticalSection DeleteFileA EnterCriticalSection TerminateProcess WaitForMultipleObjects CreateEventW FindFirstFileA Sleep SetEnvironmentVariableA GetEnvironmentVariableA WideCharToMultiByte HeapAlloc SetLastError WriteFile MoveFileA ExitProcess DeleteCriticalSection FlushFileBuffers WaitForSingleObject OpenEventA GetCurrentProcess GetFileAttributesA GetCommandLineA GetModuleFileNameA FindClose FindNextFileA SystemTimeToFileTime

user32

SendDlgItemMessageA SendMessageA DialogBoxParamA MessageBoxA SetParent EndDialog LoadStringA ShowWindow

ntdll

NtOpenProcessToken NtAdjustPrivilegesToken NtClose NtShutdownSystem

comctl32

ord17

shell32

SHBrowseForFolderA SHGetPathFromIDListA