110023b8d13f59d8e9696e4a095401b0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
110023b8d13f59d8e9696e4a095401b0_NeikiAnalytics.exe
Size 62KB
Sample240606-n72mpadh4t
SHA256 bc02575ce91ca4e877d6cb546a395dc0b2b6b38aac7bd114afb9db408c0cf086
MD5 110023b8d13f59d8e9696e4a095401b0
SHA1 ace62288035d8e7a1ce1219c8720cfdc6fda6354
SHA512 c5ed4ece498d352b41a3e875ff3340f1330ea2f19dccd7158ca65be2304600ce0bb6ba9ef13b8b6111e1be3018edfdcb9e8bdd7cea7d1c9180f98f66cc6f142e
SSDEEP 384:0S0T6axpalWnxfC8DneTNYIi5y/m69grI5XV7os9vYHmN04DQfBE4qZow0Ay9Xu:sTxxpalWUY35yu6h30OveD4aBfAy9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
110023b8d13f59d8e9696e4a095401b0_NeikiAnalytics.exe

File Explorer

110023b8d13f59d8e9696e4a095401b0_NeikiAnalytics.exe

.exe 62KB

110023b8d13f59d8e9696e4a095401b0_NeikiAnalytics.exe

IMPHASH bbcc7789723e24e729432b5c8fd5f7b1
SHA256 bc02575ce91ca4e877d6cb546a395dc0b2b6b38aac7bd114afb9db408c0cf086
MD5 110023b8d13f59d8e9696e4a095401b0
SHA1 ace62288035d8e7a1ce1219c8720cfdc6fda6354
SHA512 c5ed4ece498d352b41a3e875ff3340f1330ea2f19dccd7158ca65be2304600ce0bb6ba9ef13b8b6111e1be3018edfdcb9e8bdd7cea7d1c9180f98f66cc6f142e
SSDEEP 384:0S0T6axpalWnxfC8DneTNYIi5y/m69grI5XV7os9vYHmN04DQfBE4qZow0Ay9Xu:sTxxpalWUY35yu6h30OveD4aBfAy9
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

70282

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\yoo family\source\repos\Project1\x64\Debug\Project1.pdb

kernel32

Sleep IsDebuggerPresent RaiseException MultiByteToWideChar WideCharToMultiByte RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetProcAddress FreeLibrary VirtualQuery GetProcessHeap HeapFree HeapAlloc GetLastError GetModuleHandleW GetStartupInfoW InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess GetCurrentThreadId

vcruntime140d

__current_exception_context __vcrt_GetModuleHandleW __std_type_info_destroy_list __C_specific_handler_noexcept __C_specific_handler __current_exception __vcrt_GetModuleFileNameW __vcrt_LoadLibraryExW memcpy

ucrtbased

strcpy_s _seh_filter_dll _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _crt_at_quick_exit terminate _wmakepath_s _wsplitpath_s wcscpy_s strcat_s __p__commode _set_new_mode _configthreadlocale _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv __p___argc _set_fmode _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv __setusermatherr _set_app_type _seh_filter_exe _CrtDbgReportW _CrtDbgReport system __stdio_common_vfscanf __stdio_common_vfprintf __acrt_iob_func __stdio_common_vsprintf_s

Name

.textbss

Size

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

451B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

686B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

110023b8d13f59d8e9696e4a095401b0_NeikiAnalytics.exe

kernel32

vcruntime140d

ucrtbased

generic