1661fdde84802745bbc43a247ef00f80_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
1661fdde84802745bbc43a247ef00f80_NeikiAnalytics.exe
Size 2.3MB
Sample240604-alvelafc28
SHA256 099e36e5cfa4c432665a5f521dc5aac18018d20900576673350ffa72d5f921ee
MD5 1661fdde84802745bbc43a247ef00f80
SHA1 590e2d365dff3d744f717f95bca62115028cd8a1
SHA512 1fe312514fbcafa326fb2789289c474c444215fcb91a2de4476a747c1cbf563dd7e4b3d1dac8054aa7b352e8e0a12192304dde4a7ea6e524f6e059bc4c3691a6
SSDEEP 49152:BQixbpVndRcpfqwYO3u2XoKNLlMDEe/pmVS/F0j+kQ/qoLEw:Btdnfnwp3oOLuB/3/uyqo4w
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1661fdde84802745bbc43a247ef00f80_NeikiAnalytics.exe

File Explorer

1661fdde84802745bbc43a247ef00f80_NeikiAnalytics.exe

.exe 2.3MB

1661fdde84802745bbc43a247ef00f80_NeikiAnalytics.exe

IMPHASH 092eb6daba2f17cbda102fd1a32acd00
SHA256 099e36e5cfa4c432665a5f521dc5aac18018d20900576673350ffa72d5f921ee
MD5 1661fdde84802745bbc43a247ef00f80
SHA1 590e2d365dff3d744f717f95bca62115028cd8a1
SHA512 1fe312514fbcafa326fb2789289c474c444215fcb91a2de4476a747c1cbf563dd7e4b3d1dac8054aa7b352e8e0a12192304dde4a7ea6e524f6e059bc4c3691a6
SSDEEP 49152:BQixbpVndRcpfqwYO3u2XoKNLlMDEe/pmVS/F0j+kQ/qoLEw:Btdnfnwp3oOLuB/3/uyqo4w
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

kernel32

GetDriveTypeA HeapFree FormatMessageA LeaveCriticalSection DeleteFileA EnterCriticalSection TerminateProcess WaitForMultipleObjects CreateEventW SetEvent Sleep SetEnvironmentVariableA GetEnvironmentVariableA WideCharToMultiByte HeapAlloc SetLastError WriteFile MoveFileA ExitProcess DeleteCriticalSection FlushFileBuffers GetVersionExA WaitForSingleObject OpenEventA GetCurrentProcess GetFileAttributesA GetCommandLineA GetModuleFileNameA CreateFileA FindNextFileA FindFirstFileA CopyFileA SetFileAttributesA SystemTimeToFileTime GetSystemTime GetDiskFreeSpaceA QueryDosDeviceA GetCurrentDirectoryA SetEndOfFile SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime GetExitCodeProcess CreateProcessA ExpandEnvironmentStringsA GetFileSize CreateThread CreateEventA GetProcessHeap InitializeCriticalSectionAndSpinCount GetModuleHandleA QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter CloseHandle DeviceIoControl GetSystemDirectoryA LoadLibraryA GetProcAddress FreeLibrary SetErrorMode GetTickCount CreateDirectoryA GetLastError RemoveDirectoryA MoveFileExA SetFilePointer FindClose ReadFile

msvcrt

strchr _strnicmp _stricmp strrchr _strlwr strncpy strstr _snprintf sprintf

advapi32

AllocateAndInitializeSid GetTokenInformation GetLengthSid InitiateSystemShutdownA CryptReleaseContext CryptGenRandom CryptAcquireContextA SetSecurityDescriptorDacl AddAccessAllowedAce InitializeAcl InitializeSecurityDescriptor OpenProcessToken

user32

ShowWindow SendDlgItemMessageA SendMessageA DialogBoxParamA LoadStringA EndDialog SetParent MessageBoxA

ntdll

NtShutdownSystem NtAdjustPrivilegesToken NtClose NtOpenProcessToken

comctl32

ord17

shell32

SHBrowseForFolderA SHGetPathFromIDListA