579bd53cc79ff967126c4dcc4d5ea6f0_NeikiAnalytics[.]exe

General

Target
579bd53cc79ff967126c4dcc4d5ea6f0_NeikiAnalytics.exe
Size 157KB
Sample240608-n9ekyabe21
SHA256 dc6aab6f6aed79b5b82d8b24e3e531fc8340b741c4e17d3c5fe3ee34180ac62c
MD5 579bd53cc79ff967126c4dcc4d5ea6f0
SHA1 aa9b5703662e4905f574bb5ae90fc7e272e8b088
SHA512 8fbda43dc7accf3ad2f91f32b33ba3f501d94606c8f2c360ba069ccfb9b6d0339311a264afb693702b8a11b55cdb24f7ab08cae3394b39a707af9503eb34abb3
SSDEEP 3072:ZPzK1Nu0+5U2kvuARpvn2lQBV+UdE+rECWp7hKVwC3J5n:ZPzKHuU2iZBV+UdvrEFp7hKVZ3J5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
579bd53cc79ff967126c4dcc4d5ea6f0_NeikiAnalytics.exe

File Explorer

579bd53cc79ff967126c4dcc4d5ea6f0_NeikiAnalytics.exe

.exe 157KB

579bd53cc79ff967126c4dcc4d5ea6f0_NeikiAnalytics.exe

IMPHASH 80fd1376d440ab6c7d242144d33187bf
SHA256 dc6aab6f6aed79b5b82d8b24e3e531fc8340b741c4e17d3c5fe3ee34180ac62c
MD5 579bd53cc79ff967126c4dcc4d5ea6f0
SHA1 aa9b5703662e4905f574bb5ae90fc7e272e8b088
SHA512 8fbda43dc7accf3ad2f91f32b33ba3f501d94606c8f2c360ba069ccfb9b6d0339311a264afb693702b8a11b55cdb24f7ab08cae3394b39a707af9503eb34abb3
SSDEEP 3072:ZPzK1Nu0+5U2kvuARpvn2lQBV+UdE+rECWp7hKVwC3J5n:ZPzKHuU2iZBV+UdvrEFp7hKVZ3J5
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

18557

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Z:\b\QMI\win\qcwwan\tools\wwansvc\Release\qcmtusvc.pdb

advapi32

RegQueryValueExA RegEnumKeyExA RegOpenKeyExA RegQueryInfoKeyA RegNotifyChangeKeyValue RegCloseKey OpenServiceA CloseServiceHandle StartServiceCtrlDispatcherA DeleteService CreateServiceA RegisterServiceCtrlHandlerExA QueryServiceStatus SetServiceStatus OpenSCManagerA

user32

PostQuitMessage DefWindowProcA RegisterClassExA LoadIconA CreateWindowExA UnregisterDeviceNotification LoadCursorA RegisterDeviceNotificationA

gdi32

GetStockObject

kernel32

HeapReAlloc SetStdHandle HeapSize IsProcessorFeaturePresent FlushFileBuffers CreateFileA WriteFile CreateEventA LeaveCriticalSection GetOverlappedResult GetLastError EnterCriticalSection DeviceIoControl CancelIo DeleteCriticalSection CloseHandle CreateThread WaitForSingleObject SetEvent ResetEvent WaitForMultipleObjects GetModuleHandleA GetExitCodeProcess CreateProcessA GetModuleFileNameA CreateMutexA ReleaseMutex OutputDebugStringA HeapFree HeapAlloc ReadConsoleInputA SetConsoleMode GetConsoleMode GetCommandLineA HeapSetInformation TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DecodePointer EncodePointer HeapCreate GetProcAddress GetModuleHandleW ExitProcess GetStdHandle GetModuleFileNameW CreateFileW InitializeCriticalSectionAndSpinCount GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType GetStartupInfoW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP Sleep LoadLibraryW RtlUnwind WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW

Sharing