2144112e6180ba6dac7514c4972d3360_NeikiAnalytics[.]exe

General

Target
2144112e6180ba6dac7514c4972d3360_NeikiAnalytics.exe
Size 457KB
Sample240611-a2yrysxcjf
SHA256 397a06a8dfebd9cecab74cf9563017042fbf04050a8f368b2b2ac644643d35c1
MD5 2144112e6180ba6dac7514c4972d3360
SHA1 e96159f89a6ec9653180df80f50e2c9b0212ff1a
SHA512 f97a3d1fcb7134634213ddcf0c4b4eb27b8382e196e8fb428954ad2a105fd00b98ccc1febcded67f97fa3aa848139738e34d623f55de83745d92a65afd3948d2
SSDEEP 12288:Ha+VWigpr73NMMlti+mK0BNpb1QNLfziqXfjk4JFy8BuxgPrxt:H7Vhu9MM8LbSLmWjk4L4xgTxt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2144112e6180ba6dac7514c4972d3360_NeikiAnalytics.exe

File Explorer

2144112e6180ba6dac7514c4972d3360_NeikiAnalytics.exe

.dll 457KB

2144112e6180ba6dac7514c4972d3360_NeikiAnalytics.exe

IMPHASH f6a28dfda7eb5981283f4f47b3585fd3
SHA256 397a06a8dfebd9cecab74cf9563017042fbf04050a8f368b2b2ac644643d35c1
MD5 2144112e6180ba6dac7514c4972d3360
SHA1 e96159f89a6ec9653180df80f50e2c9b0212ff1a
SHA512 f97a3d1fcb7134634213ddcf0c4b4eb27b8382e196e8fb428954ad2a105fd00b98ccc1febcded67f97fa3aa848139738e34d623f55de83745d92a65afd3948d2
SSDEEP 12288:Ha+VWigpr73NMMlti+mK0BNpb1QNLfziqXfjk4JFy8BuxgPrxt:H7Vhu9MM8LbSLmWjk4L4xgTxt
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

401408

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetThreadTimes GetCurrentThread GetSystemTimes GetStartupInfoA GetCurrentProcessId GetProcessWorkingSetSize GlobalMemoryStatus CloseHandle ReadFile CreateFileA SystemTimeToFileTime GetSystemTime GetVersionExA DecodePointer GetCommandLineA GetLastError FindClose FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeA FindFirstFileExA EnterCriticalSection LeaveCriticalSection EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement GetModuleHandleW SetLastError InterlockedDecrement GetProcAddress HeapFree Sleep ExitProcess SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy GetCurrentProcess GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetFullPathNameA GetFileInformationByHandle PeekNamedPipe GetCurrentDirectoryW MultiByteToWideChar RtlUnwind GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW HeapAlloc HeapReAlloc LoadLibraryW WriteFile GetModuleFileNameW CompareStringW SetEnvironmentVariableA GetDriveTypeW SetStdHandle GetConsoleCP GetConsoleMode SetFilePointer SetEndOfFile GetProcessHeap GetTimeZoneInformation FlushFileBuffers GetStringTypeW HeapSize WriteConsoleW CreateFileW GetProcessTimes QueryPerformanceCounter GetTickCount GetCurrentThreadId

user32

GetMessagePos GetFocus GetClipboardViewer GetClipboardOwner GetCapture GetActiveWindow GetCursorPos GetQueueStatus GetMessageTime GetCaretPos

advapi32

RegQueryValueExA RegOpenKeyExA RegCloseKey

Name

.text

Size

249KB

Virtual Size

248KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

95KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

952B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

86KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2144112e6180ba6dac7514c4972d3360_NeikiAnalytics.exe

kernel32

user32

advapi32

generic