1e8c1ce3ad8b2d6785233b2f56558820_NeikiAnalytics[.]exe

General

Target
1e8c1ce3ad8b2d6785233b2f56558820_NeikiAnalytics.exe
Size 279KB
Sample240610-21plfavcpl
SHA256 b25355ef42f60d240e13dd8a0993ba7713676f0114ae2542f168434692afcbaa
MD5 1e8c1ce3ad8b2d6785233b2f56558820
SHA1 d6effc7c5324834b9dbec405ff69c960f901dfc5
SHA512 8783bbae4df6749f0126cfc05f9b9b68dc65c2f93ff3b5ebdf22b79b53adfecfe244c880e8cbb7c23a72a31cef9079707f4511bcb5ea3ff1e39510066ce9e676
SSDEEP 3072:7FXgCowNYg9QsVYHd27wAW+j1WAfCR/5dAOilM3RQmJoY46mgywRexc261a:7MwGyX+H87w48pRJiIohFjO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e8c1ce3ad8b2d6785233b2f56558820_NeikiAnalytics.exe

File Explorer

1e8c1ce3ad8b2d6785233b2f56558820_NeikiAnalytics.exe

.exe 279KB

1e8c1ce3ad8b2d6785233b2f56558820_NeikiAnalytics.exe

IMPHASH 3414a1e94eb84983945a0d52165ae384
SHA256 b25355ef42f60d240e13dd8a0993ba7713676f0114ae2542f168434692afcbaa
MD5 1e8c1ce3ad8b2d6785233b2f56558820
SHA1 d6effc7c5324834b9dbec405ff69c960f901dfc5
SHA512 8783bbae4df6749f0126cfc05f9b9b68dc65c2f93ff3b5ebdf22b79b53adfecfe244c880e8cbb7c23a72a31cef9079707f4511bcb5ea3ff1e39510066ce9e676
SSDEEP 3072:7FXgCowNYg9QsVYHd27wAW+j1WAfCR/5dAOilM3RQmJoY46mgywRexc261a:7MwGyX+H87w48pRJiIohFjO
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

41312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

VirtualAlloc CreateThread WaitForSingleObject CloseHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW GetModuleHandleW GetProcAddress RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead WideCharToMultiByte EncodePointer DecodePointer InitializeCriticalSectionEx MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo WriteConsoleW RtlUnwindEx RtlPcToFileHeader RaiseException GetLastError SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetCurrentProcess TerminateProcess ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap SetStdHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc HeapSize CreateFileW RtlUnwind

Sharing