d4f7ce5b6dbc08e933bfbdd4a8581c70_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
d4f7ce5b6dbc08e933bfbdd4a8581c70_NeikiAnalytics.exe
Size 362KB
Sample240604-yj2b5ahe2v
SHA256 01f153f2f9746be0c5da73e7383fe16d391011141a3bf19aae595550e82dae91
MD5 d4f7ce5b6dbc08e933bfbdd4a8581c70
SHA1 3be7dd6d012be2ed1cb351fb8355bd29465e6203
SHA512 c78c84984890d3f6fb6c58a6fd4e4ab05ea175293957ca7068835b1f6d7ef458ae2a29c166a093ee07aa9605174b5861c83893eb0feb6b973342bb3dfd201320
SSDEEP 6144:zNZcj6qhhdPlLvWb/pTkMWsQZcP217ynNFUm29uhUPeDqFodF9SF9lf:uZs/WMWshP2hmtUPeDqKdFYdf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4f7ce5b6dbc08e933bfbdd4a8581c70_NeikiAnalytics.exe

File Explorer

d4f7ce5b6dbc08e933bfbdd4a8581c70_NeikiAnalytics.exe

.dll 362KB

d4f7ce5b6dbc08e933bfbdd4a8581c70_NeikiAnalytics.exe

IMPHASH e8b4db70ad20b10f8f7e8f12fd8b3e7d
SHA256 01f153f2f9746be0c5da73e7383fe16d391011141a3bf19aae595550e82dae91
MD5 d4f7ce5b6dbc08e933bfbdd4a8581c70
SHA1 3be7dd6d012be2ed1cb351fb8355bd29465e6203
SHA512 c78c84984890d3f6fb6c58a6fd4e4ab05ea175293957ca7068835b1f6d7ef458ae2a29c166a093ee07aa9605174b5861c83893eb0feb6b973342bb3dfd201320
SSDEEP 6144:zNZcj6qhhdPlLvWb/pTkMWsQZcP217ynNFUm29uhUPeDqFodF9SF9lf:uZs/WMWshP2hmtUPeDqKdFYdf
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

303104

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LocalFree FormatMessageA VirtualProtect QueryPerformanceFrequency GetProcAddress QueryPerformanceCounter VirtualQuery EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime DisableThreadLibraryCalls InitializeSListHead GetCurrentProcess TerminateProcess CloseHandle

msvcp140

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPBD@Z ?_Xlength_error@std@@YAXPBD@Z ?uncaught_exception@std@@YA_NXZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?_BADOFF@std@@3_JB ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

vcruntime140

__CxxFrameHandler3 memcpy __std_type_info_destroy_list _except_handler4_common _CxxThrowException memset __telemetry_main_return_trigger __telemetry_main_invoke_trigger __vcrt_InitializeCriticalSectionEx memchr __std_exception_destroy __std_terminate _purecall memmove __std_exception_copy

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _seh_filter_dll _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _cexit _errno _initterm _initterm_e _execute_onexit_table strerror _crt_atexit

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf __acrt_iob_func __stdio_common_vsprintf_s __stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

_aligned_malloc realloc free _callnewh malloc _aligned_free

api-ms-win-crt-utility-l1-1-0

bsearch

api-ms-win-crt-convert-l1-1-0

strtol atoi

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

_libm_sse2_atan_precise _libm_sse2_cos_precise _libm_sse2_sin_precise _libm_sse2_sqrt_precise ceil floor _except1 _CIatan2

Name

.text

Size

221KB

Virtual Size

220KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

31KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

90KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

d4f7ce5b6dbc08e933bfbdd4a8581c70_NeikiAnalytics.exe

kernel32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

generic