2f98dfc66123c9f02d328b4a501689a0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2f98dfc66123c9f02d328b4a501689a0_NeikiAnalytics.exe
Size 175KB
Sample240605-dhhs6scd2t
SHA256 1017d78f256191e97624071fe045c2b0a35b99483add2e4cabe8beb5430daf32
MD5 2f98dfc66123c9f02d328b4a501689a0
SHA1 e1116154dd03726faff662f1bcc3a0d7c0674611
SHA512 381f40354ac2efba8d19775c4db2800a6ff94195294b0ab9ef3e3ed3c0bfbc840ac4b30d6c5a0cc51792b9b652ee6529dc6bf581713002dc355dbdf20e3bcdd6
SSDEEP 3072:NMII6qz7vhvOVsLx7+9C9lMuA4L5+ZdopOuoWUl1iaS0ajHTg/p8M5:NMvT1OLC9libZNZ7TipP6p8m
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f98dfc66123c9f02d328b4a501689a0_NeikiAnalytics.exe

File Explorer

2f98dfc66123c9f02d328b4a501689a0_NeikiAnalytics.exe

.exe 175KB

2f98dfc66123c9f02d328b4a501689a0_NeikiAnalytics.exe

IMPHASH b71ae52e8715ee7bfaa0c9df227db54a
SHA256 1017d78f256191e97624071fe045c2b0a35b99483add2e4cabe8beb5430daf32
MD5 2f98dfc66123c9f02d328b4a501689a0
SHA1 e1116154dd03726faff662f1bcc3a0d7c0674611
SHA512 381f40354ac2efba8d19775c4db2800a6ff94195294b0ab9ef3e3ed3c0bfbc840ac4b30d6c5a0cc51792b9b652ee6529dc6bf581713002dc355dbdf20e3bcdd6
SSDEEP 3072:NMII6qz7vhvOVsLx7+9C9lMuA4L5+ZdopOuoWUl1iaS0ajHTg/p8M5:NMvT1OLC9libZNZ7TipP6p8m
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

84672

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetLastError SetLastError GetTickCount ExitProcess GetStartupInfoA GetStdHandle GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer FreeLibrary LoadLibraryA GetProcAddress DeleteFileW MoveFileW CreateFileW GetFileAttributesW GetConsoleMode GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsGetValue TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP SetUnhandledExceptionFilter EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource GetWindowsDirectoryA CopyFileA CreateProcessA GetVersionExA CompareStringA GetLocaleInfoA EnumCalendarInfoA FormatMessageW CompareStringW TerminateProcess GetThreadLocale SetThreadLocale GetUserDefaultLCID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

user32

MessageBoxA CharUpperBuffW CharLowerBuffW CharUpperA CharUpperBuffA CharLowerA CharLowerBuffA GetSystemMetrics MessageBeep

shlwapi

SHSetThreadRef

Name

.text

Size

79KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

INIT

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

78KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.l1

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2f98dfc66123c9f02d328b4a501689a0_NeikiAnalytics.exe

kernel32

oleaut32

user32

shlwapi

generic