c8f02af8688de21e290b3b1af11e95d0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
c8f02af8688de21e290b3b1af11e95d0_NeikiAnalytics.exe
Size 1.2MB
Sample240606-y2zagscf38
SHA256 2ad8a24ab33329abfdc634b9b36747675d4194e3c46102e1cdda942e64504f05
MD5 c8f02af8688de21e290b3b1af11e95d0
SHA1 48eeceed46534bf35726ea5905cbf435e5fe7fc9
SHA512 100697f0d619c64c4cabda72b2729fc2fc08d4ff57d3be798e2d4d4d1b12bbbd44800224b829b575b666b2211f78105a04f774faa2674a3b1819ed97b18485a3
SSDEEP 12288:NaQqKT1Ylc+pFByStv9JRa//inz86NRo1qiRlUWC4kXzVC3:vTEc+pFB5z+//ufNRoZW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8f02af8688de21e290b3b1af11e95d0_NeikiAnalytics.exe

File Explorer

c8f02af8688de21e290b3b1af11e95d0_NeikiAnalytics.exe

.exe 1.2MB

c8f02af8688de21e290b3b1af11e95d0_NeikiAnalytics.exe

IMPHASH c13c1bdb7371583da62542f08c300c96
SHA256 2ad8a24ab33329abfdc634b9b36747675d4194e3c46102e1cdda942e64504f05
MD5 c8f02af8688de21e290b3b1af11e95d0
SHA1 48eeceed46534bf35726ea5905cbf435e5fe7fc9
SHA512 100697f0d619c64c4cabda72b2729fc2fc08d4ff57d3be798e2d4d4d1b12bbbd44800224b829b575b666b2211f78105a04f774faa2674a3b1819ed97b18485a3
SSDEEP 12288:NaQqKT1Ylc+pFByStv9JRa//inz86NRo1qiRlUWC4kXzVC3:vTEc+pFB5z+//ufNRoZW
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27885

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

CreatePropertySheetPageA PropertySheetA

kernel32

GetVersionExA DeleteFileA GetPrivateProfileIntA GetPrivateProfileStringA ResumeThread SetPriorityClass GetCurrentProcess GetCurrentThread SetThreadPriority CreateProcessA GetModuleFileNameA RemoveDirectoryA GetFileSize GetModuleHandleA GetTempPathA CreateDirectoryA GetFileAttributesA MapViewOfFile CreateFileMappingA CloseHandle SetFileTime GetStartupInfoA DosDateTimeToFileTime GetLastError CreateFileA SetLastError FreeLibrary FormatMessageA LocalFree MultiByteToWideChar LoadLibraryA GetProcAddress lstrlenA GetTempFileNameA UnmapViewOfFile

user32

SendMessageA GetFocus GetWindowRect RegisterClassA CreateWindowExA ShowWindow UpdateWindow LoadCursorA SetCursor PeekMessageA TranslateMessage DispatchMessageA GetDlgItem MessageBoxA MoveWindow GetDC ReleaseDC SendDlgItemMessageA GetParent wsprintfA SetDlgItemTextA PostMessageA DefWindowProcA BeginPaint GetSystemMetrics EndPaint

gdi32

DeleteObject TextOutA SetBkMode SelectObject CreateFontA CreateDIBitmap CreateSolidBrush SetTextColor

advapi32

RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegDeleteValueA RegDeleteKeyA RegCloseKey RegSetValueExA RegQueryValueA RegEnumKeyExA

shell32

ShellExecuteA

ole32

CoInitialize CoCreateInstance CoUninitialize

msvcr71

_acmdln exit _cexit _ismbblead _XcptFilter _exit _c_exit _amsg_exit __getmainargs _initterm __setusermatherr _adjust_fdiv __p__commode __p__fmode __set_app_type _except_handler3 __dllonexit _onexit _controlfp _strnicmp _strcmpi _strdup _tempnam _close _read __p___argc __p___argv _open strncmp fgets realloc strchr memcpy memset strncat strcat strlen strcpy strcmp strrchr fprintf _vsnprintf malloc _snprintf strncpy free sscanf _putenv remove fread ftell fseek fopen fclose fflush freopen _iob fwrite strftime localtime time sprintf _fstat strtol _pctype _isctype __mb_cur_max qsort