1971bca59d06c2b08116ae210fd41aa0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
1971bca59d06c2b08116ae210fd41aa0_NeikiAnalytics.exe
Size 784KB
Sample240604-a76pragb77
SHA256 4ee671400a87a96e9ce02764cb94983dc637255256d9884551e8a6a068fedc1b
MD5 1971bca59d06c2b08116ae210fd41aa0
SHA1 d7d5fb272c021f8e098ad17669e4c4fa0cbc8b57
SHA512 e51e5fe92c866e3915dbe15a5e2a59ae73b63a5da496a0c1de0118b218645e5ab2e8de4ee160e63c703b7bbf1c7f82f05e5e2d75e6f46a9b422547b9d0d129f3
SSDEEP 24576:dKn0TXAmaouGSPGM9ZQ8GYelhwOXGEDgm6:40TwdPGM7nmoOl
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1971bca59d06c2b08116ae210fd41aa0_NeikiAnalytics.exe

File Explorer

1971bca59d06c2b08116ae210fd41aa0_NeikiAnalytics.exe

.exe 784KB

1971bca59d06c2b08116ae210fd41aa0_NeikiAnalytics.exe

IMPHASH aa466c044f0d2d2f6270070fe1bddf7b
SHA256 4ee671400a87a96e9ce02764cb94983dc637255256d9884551e8a6a068fedc1b
MD5 1971bca59d06c2b08116ae210fd41aa0
SHA1 d7d5fb272c021f8e098ad17669e4c4fa0cbc8b57
SHA512 e51e5fe92c866e3915dbe15a5e2a59ae73b63a5da496a0c1de0118b218645e5ab2e8de4ee160e63c703b7bbf1c7f82f05e5e2d75e6f46a9b422547b9d0d129f3
SSDEEP 24576:dKn0TXAmaouGSPGM9ZQ8GYelhwOXGEDgm6:40TwdPGM7nmoOl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

57804

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\python-dev\porting\cpython\lib\distutils\command\wininst-9.0-amd64.pdb

comctl32

CreatePropertySheetPageA PropertySheetA

kernel32

FreeLibrary SetStdHandle GetStdHandle LocalFree FormatMessageA GetTempFileNameA GetTempPathA GetModuleHandleA GetVersionExA ResumeThread SetPriorityClass GetCurrentProcess GetCurrentThread SetThreadPriority CreateProcessA GetModuleFileNameA RemoveDirectoryA GetPrivateProfileIntA GetPrivateProfileStringA GetModuleFileNameW SetEndOfFile CreateFileW GetFileSize HeapSize WriteConsoleW FlushFileBuffers IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetStringTypeW LCMapStringW GetCurrentProcessId GetTickCount QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetLocaleInfoW LoadLibraryW SetConsoleCtrlHandler GetConsoleMode GetConsoleCP SetHandleCount FatalAppExitA DeleteCriticalSection InitializeCriticalSectionAndSpinCount RtlUnwindEx SetFilePointer ReadFile DeleteFileA LoadLibraryA GetProcAddress MultiByteToWideChar lstrlenA CompareStringW UnmapViewOfFile CreateFileA GetLastError DosDateTimeToFileTime SetFileTime CloseHandle CreateFileMappingA MapViewOfFile GetFileAttributesA CreateDirectoryA SetLastError Sleep GetProcessHeap SetEnvironmentVariableA SetEnvironmentVariableW WriteFile HeapDestroy GetSystemTimeAsFileTime HeapFree HeapAlloc FileTimeToSystemTime FileTimeToLocalFileTime GetFileInformationByHandle PeekNamedPipe GetFileType EnterCriticalSection LeaveCriticalSection GetDateFormatA GetTimeFormatA HeapReAlloc GetModuleHandleW ExitProcess DecodePointer GetCommandLineA GetStartupInfoW TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EncodePointer WideCharToMultiByte GetTimeZoneInformation GetCPInfo GetACP GetOEMCP IsValidCodePage FlsGetValue FlsSetValue FlsFree GetCurrentThreadId FlsAlloc HeapSetInformation GetVersion HeapCreate

user32

wsprintfA GetFocus MessageBoxA SetCursor GetDlgItem SendDlgItemMessageA GetParent PostMessageA GetWindowRect MoveWindow LoadCursorA RegisterClassA CreateWindowExA ShowWindow UpdateWindow DefWindowProcA BeginPaint GetSystemMetrics EndPaint TranslateMessage DispatchMessageA PeekMessageA GetDC ReleaseDC SendMessageA SetDlgItemTextA

gdi32

CreateFontA SelectObject SetBkMode TextOutA SetTextColor DeleteObject CreateDIBitmap CreateSolidBrush

advapi32

RegSetValueExA RegEnumKeyExA RegCloseKey RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegQueryValueExA RegOpenKeyExA RegQueryValueA

shell32

ShellExecuteA

ole32

CoCreateInstance CoInitialize CoUninitialize