18f2272dc848a6813d6e0dc7d89508b0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
18f2272dc848a6813d6e0dc7d89508b0_NeikiAnalytics.exe
Size 712KB
Sample240604-a4x87sfc3x
SHA256 c61da705acb00643e7e6c352f59a0cbdbe591cba7f85c5cc9de25d87db321a72
MD5 18f2272dc848a6813d6e0dc7d89508b0
SHA1 64d2701c8125ea1a97504d4538453899116f6370
SHA512 b4e4b1531eb52472de605f9166067a8dfdefa191efc1e90459753af1a4a06b6264b3c3abb0aeae50d9071e51f04ccb8c9b35247ebbe0e7ed08ca4973ee7b2705
SSDEEP 12288:XtOw6BaMZI3XPWvOYRcDRJZ4w8qIV8mQR8XZi/mWcSjpI0Tkdure6:t6BxW+vxWJq0Q7QqtWLjXTqM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18f2272dc848a6813d6e0dc7d89508b0_NeikiAnalytics.exe

File Explorer

18f2272dc848a6813d6e0dc7d89508b0_NeikiAnalytics.exe

.exe 712KB

18f2272dc848a6813d6e0dc7d89508b0_NeikiAnalytics.exe

IMPHASH 193b654ecb38f71ffa2fa47fac4c2bf7
SHA256 c61da705acb00643e7e6c352f59a0cbdbe591cba7f85c5cc9de25d87db321a72
MD5 18f2272dc848a6813d6e0dc7d89508b0
SHA1 64d2701c8125ea1a97504d4538453899116f6370
SHA512 b4e4b1531eb52472de605f9166067a8dfdefa191efc1e90459753af1a4a06b6264b3c3abb0aeae50d9071e51f04ccb8c9b35247ebbe0e7ed08ca4973ee7b2705
SSDEEP 12288:XtOw6BaMZI3XPWvOYRcDRJZ4w8qIV8mQR8XZi/mWcSjpI0Tkdure6:t6BxW+vxWJq0Q7QqtWLjXTqM
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25348

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

InitCommonControlsEx

kernel32

GlobalUnlock FlushFileBuffers WriteConsoleW SetStdHandle OutputDebugStringW HeapReAlloc LoadLibraryExW LCMapStringW RtlUnwind SetFilePointerEx GetConsoleMode GetConsoleCP LeaveCriticalSection EnterCriticalSection FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter WriteFile GetModuleFileNameW DeleteCriticalSection GetFileType GetStdHandle GetProcessHeap HeapSize GetModuleHandleExW ExitProcess WideCharToMultiByte GetStringTypeW GetCPInfo GetOEMCP GetACP IsValidCodePage GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess Sleep InitializeCriticalSectionAndSpinCount SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter HeapFree GetLastError RaiseException HeapAlloc GetCommandLineW DecodePointer EncodePointer IsProcessorFeaturePresent IsDebuggerPresent CloseHandle VirtualFreeEx ReadProcessMemory VirtualAllocEx OpenProcess CreateFileW GlobalLock GlobalAlloc FreeLibrary GetProcAddress GetModuleHandleW MulDiv MultiByteToWideChar GetCurrentThreadId

user32

GetClassNameW SendMessageTimeoutW AttachThreadInput GetWindowThreadProcessId GetWindowLongW GetParent SendMessageW GetCursor GetDesktopWindow RedrawWindow GetWindowDC IsWindow GetWindow ChildWindowFromPointEx ClientToScreen EnumChildWindows GetWindowTextW GetDlgCtrlID GetForegroundWindow WindowFromPoint CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ReleaseCapture SendDlgItemMessageW SetCapture SetCursor EndDeferWindowPos DeferWindowPos BeginDeferWindowPos DefWindowProcW MessageBoxW DestroyWindow KillTimer PostQuitMessage GetWindowPlacement RegisterClassExW LoadIconW DispatchMessageW TranslateMessage IsDialogMessageW GetMessageW SetTimer GetClientRect SetWindowTextW SetWindowPos GetMenu CheckMenuItem LoadCursorW LoadImageW RegisterWindowMessageW RegisterHotKey CreateWindowExW DestroyIcon ReleaseDC GetDC GetCursorPos IsWindowVisible ShowWindow EnableWindow MoveWindow ScreenToClient GetWindowRect InvalidateRect

gdi32

DeleteDC BitBlt LineTo MoveToEx StretchBlt PatBlt CreateCompatibleBitmap CreateCompatibleDC Rectangle SetROP2 GetStockObject SelectObject CreatePen GetPixel DeleteObject CreateFontW

comdlg32

ChooseColorW

advapi32

RegOpenKeyExW RegSetValueExW RegCreateKeyExW RegCloseKey RegQueryValueExW