95e9dfe8707d193d7c1f866583df2540_NeikiAnalytics[.]exe

General

Target
95e9dfe8707d193d7c1f866583df2540_NeikiAnalytics.exe
Size 39KB
Sample240608-hmqrssah73
SHA256 d4e0ede620e569c099c97aad8783d2fca35a085713be5456175b9815f3b3d736
MD5 95e9dfe8707d193d7c1f866583df2540
SHA1 1b50eb5adc0b674fb9e757c69d8d068fd6b2765e
SHA512 f47e18c93275fb020cd0f72d59029d3ae34bf6f44eed969b3398ce2ef02337c6132500ba49d6c09a84b117f1dab2adb1dd22b3c3827fc5e609551229d8c3dd06
SSDEEP 768:x99gH6MwOMF7yuryGUjA3kFiqrrc5HpzNqXZjY9l:x2PwnF+urajA3Wi1z0jY9l
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95e9dfe8707d193d7c1f866583df2540_NeikiAnalytics.exe

File Explorer

95e9dfe8707d193d7c1f866583df2540_NeikiAnalytics.exe

.exe 39KB

95e9dfe8707d193d7c1f866583df2540_NeikiAnalytics.exe

IMPHASH 514383cb1bf5d51a698688e6e0449940
SHA256 d4e0ede620e569c099c97aad8783d2fca35a085713be5456175b9815f3b3d736
MD5 95e9dfe8707d193d7c1f866583df2540
SHA1 1b50eb5adc0b674fb9e757c69d8d068fd6b2765e
SHA512 f47e18c93275fb020cd0f72d59029d3ae34bf6f44eed969b3398ce2ef02337c6132500ba49d6c09a84b117f1dab2adb1dd22b3c3827fc5e609551229d8c3dd06
SSDEEP 768:x99gH6MwOMF7yuryGUjA3kFiqrrc5HpzNqXZjY9l:x2PwnF+urajA3Wi1z0jY9l
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9811

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

attrib.pdb

ulib

?Get_Standard_Output_Stream@@YGPAVSTREAM@@XZ ??0DSTRING@@QAE@XZ ??0PATH@@QAE@XZ ??0STRING_ARGUMENT@@QAE@XZ ??0ARRAY@@QAE@XZ ??0ARGUMENT_LEXEMIZER@@QAE@XZ ?QueryFsnodeArray@FSN_DIRECTORY@@QBEPAVARRAY@@PAVFSN_FILTER@@@Z ??1PROGRAM@@UAE@XZ ??1PATH_ARGUMENT@@UAE@XZ ??1FSN_FILTER@@UAE@XZ ??1STREAM_MESSAGE@@UAE@XZ ?ValidateVersion@PROGRAM@@UBEXKK@Z ?Usage@PROGRAM@@UBEXXZ ?GetStandardError@PROGRAM@@UAEPAVSTREAM@@XZ ?Get_Standard_Input_Stream@@YGPAVSTREAM@@XZ ?GetStandardInput@PROGRAM@@UAEPAVSTREAM@@XZ ?Fatal@PROGRAM@@UBEXXZ ?Fatal@PROGRAM@@UBAXKKPADZZ ?DisplayMessage@PROGRAM@@UBEEKW4MESSAGE_TYPE@@@Z ?DisplayMessage@PROGRAM@@UBAEKW4MESSAGE_TYPE@@PADZZ ?Compare@OBJECT@@UBEJPBV1@@Z ??0STREAM_MESSAGE@@QAE@XZ ??0FSN_FILTER@@QAE@XZ ??0PATH_ARGUMENT@@QAE@XZ ??0FLAG_ARGUMENT@@QAE@XZ ??0PROGRAM@@IAE@XZ ?Initialize@CLASS_DESCRIPTOR@@QAEEXZ ??0CLASS_DESCRIPTOR@@QAE@XZ ?Initialize@STREAM_MESSAGE@@QAEEPAVSTREAM@@00@Z ?Initialize@WSTRING@@QAEEPBGK@Z ?Initialize@ARRAY@@QAEEKK@Z ?PutSwitches@ARGUMENT_LEXEMIZER@@QAEXPBD@Z ?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z ?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z ?PutSeparators@ARGUMENT_LEXEMIZER@@QAEXPBD@Z ?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z ?Initialize@STRING_ARGUMENT@@QAEEPAD@Z ?Initialize@FLAG_ARGUMENT@@QAEEPAD@Z ?Initialize@PATH_ARGUMENT@@QAEEPADE@Z ?Put@ARRAY@@UAEEPAVOBJECT@@@Z ?DoParsing@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z ?IsValueSet@ARGUMENT@@QAEEXZ ?Initialize@PATH@@QAEEPBGE@Z ?Initialize@PATH@@QAEEPBVWSTRING@@E@Z ?IsDrive@PATH@@QBEEXZ ?Initialize@WSTRING@@QAEEPBV1@KK@Z ?Strcat@WSTRING@@QAEEPBV1@@Z ?Initialize@PATH@@QAEEPBV1@E@Z ?QueryDirectory@SYSTEM@@SGPAVFSN_DIRECTORY@@PBVPATH@@E@Z ?SetFileName@FSN_FILTER@@QAEEPBD@Z ?Initialize@FSN_FILTER@@QAEEXZ ?SetAttributes@FSN_FILTER@@QAEEKKK@Z ?SetFileName@FSN_FILTER@@QAEEPBVWSTRING@@@Z ?DeleteAllMembers@ARRAY@@UAEEXZ ??1STRING_ARGUMENT@@UAE@XZ ??1PATH@@UAE@XZ ??1ARRAY@@UAE@XZ ??1ARGUMENT_LEXEMIZER@@UAE@XZ ??1DSTRING@@UAE@XZ ??1OBJECT@@UAE@XZ ?Display@MESSAGE@@QAAEPBDZZ ?Initialize@WSTRING@@QAEEPBDK@Z ?GetStandardOutput@PROGRAM@@UAEPAVSTREAM@@XZ ?QueryString@WSTRING@@QBEPAV1@KK@Z

ntdll

wcschr RtlFreeHeap RtlAllocateHeap swprintf

msvcrt

_controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs __initenv exit _cexit _XcptFilter _exit _c_exit

kernel32

SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter SetFileAttributesW GetLastError GetModuleHandleA

Sharing