1525a83f8bb575bcc513eb03c05ea390_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
1525a83f8bb575bcc513eb03c05ea390_NeikiAnalytics.exe
Size 648KB
Sample240604-adghrseh65
SHA256 baffa15bac5175ece31de13b0f11eef4122eb2a369ffde00fa50c0ca1e76af6c
MD5 1525a83f8bb575bcc513eb03c05ea390
SHA1 8c08b63b9fc711e56f047be19d6eca16cc25d5a2
SHA512 edffed7af3cefd842e0c92afa1ebf83552241f41ddc8aac18aff3b20a224fd8efdc40554f699e070547f228a2e923af111ea8d6110432abe7e1f34bf0b323981
SSDEEP 12288:Lqz2DWU2Ixn85c6S4Hb4849nIYVjIlCOU4hog96o2gZ:mz2DWd65gcTVjUCs2Vo2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1525a83f8bb575bcc513eb03c05ea390_NeikiAnalytics.exe

File Explorer

1525a83f8bb575bcc513eb03c05ea390_NeikiAnalytics.exe

.exe 648KB

1525a83f8bb575bcc513eb03c05ea390_NeikiAnalytics.exe

IMPHASH c54f40d6023142651a792ae38ae262de
SHA256 baffa15bac5175ece31de13b0f11eef4122eb2a369ffde00fa50c0ca1e76af6c
MD5 1525a83f8bb575bcc513eb03c05ea390
SHA1 8c08b63b9fc711e56f047be19d6eca16cc25d5a2
SHA512 edffed7af3cefd842e0c92afa1ebf83552241f41ddc8aac18aff3b20a224fd8efdc40554f699e070547f228a2e923af111ea8d6110432abe7e1f34bf0b323981
SSDEEP 12288:Lqz2DWU2Ixn85c6S4Hb4849nIYVjIlCOU4hog96o2gZ:mz2DWd65gcTVjUCs2Vo2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

30784

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

mscorsvw.pdb

mscoree

GetRequestedRuntimeInfo GetRealProcAddress

msvcr80

?_type_info_dtor_internal_method@type_info@@QEAAXXZ __crt_debugger_hook _decode_pointer _onexit _lock __dllonexit _unlock ?terminate@@YAXXZ __set_app_type _encode_pointer _fmode _commode __setusermatherr _configthreadlocale _initterm_e _initterm _acmdln exit _cexit _ismbblead _exit _XcptFilter __C_specific_handler __getmainargs _amsg_exit free malloc _vsnprintf _snwprintf_s wcstoul wcscat_s towupper _vsnwprintf_s _errno _vsnprintf_s strcpy_s wcsncpy_s wcscpy_s memmove _purecall _wcsicmp memcmp memcpy _CxxThrowException __CxxFrameHandler3 memset

advapi32

RegOpenKeyExA RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegQueryValueExW RegOpenKeyExW RegCloseKey

kernel32

VirtualAlloc SleepEx ReleaseMutex CreateMutexW WaitForSingleObjectEx HeapFree GetProcessHeap HeapAlloc TlsFree TlsAlloc TlsSetValue ReleaseSemaphore CreateSemaphoreW ResetEvent DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection GetCurrentProcessId VirtualFree GetVersionExA RaiseException CloseHandle GetSystemTimeAsFileTime QueryPerformanceCounter GetCurrentThreadId VirtualQuery VirtualProtect HeapCreate HeapDestroy HeapValidate Sleep GetStartupInfoA SetUnhandledExceptionFilter GetTickCount UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext LoadLibraryExW GetCommandLineW GetCurrentProcess SetEvent GetModuleHandleW OpenProcess LoadLibraryW TerminateProcess GetModuleFileNameW GetProcAddress CreateEventW WaitForMultipleObjects IsDebuggerPresent OpenEventW DebugBreak CreateThread TlsGetValue FreeLibrary GetLastError SetLastError LocalFree MultiByteToWideChar GetACP GetCPInfo WideCharToMultiByte FormatMessageW GetEnvironmentVariableW lstrlenW

user32

LoadStringW PeekMessageW DispatchMessageW MessageBoxW MsgWaitForMultipleObjects

ole32

CoRegisterClassObject CoInitializeEx CoReleaseServerProcess CoAddRefServerProcess CoUninitialize CoRevokeClassObject

oleaut32

SetErrorInfo SysStringLen