4ad00085fdaf8ca061f774cdae137520_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
4ad00085fdaf8ca061f774cdae137520_NeikiAnalytics.exe
Size 212KB
Sample240612-2wjjmatfrd
SHA256 15f80a7d63cc3fccc201d33d2bcde1f812de257300df830b41c78712d5154357
MD5 4ad00085fdaf8ca061f774cdae137520
SHA1 c644b7d05d5499d346e2693853a283d5eff23db6
SHA512 f255f3521a41a1e2e36f6bbf3e4e4e4db02d865653ed37a4d3de193f778bd328189213eb3f0239899bae8a863fa0a3e0ab4d58140b1d4237cb55153058f86dae
SSDEEP 3072:8GwPsm1VrwxOsf0juzv8j4P1Hr6krr4IEhx9QZe2gO9mG9UHA30Vt3E/vDjb:8G/iVkO20SFgBhxtW9mG9+Umt3Ezjb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ad00085fdaf8ca061f774cdae137520_NeikiAnalytics.exe

File Explorer

4ad00085fdaf8ca061f774cdae137520_NeikiAnalytics.exe

.exe 212KB

4ad00085fdaf8ca061f774cdae137520_NeikiAnalytics.exe

IMPHASH 728b5168c443fc8cea3c0c483ddbb8ff
SHA256 15f80a7d63cc3fccc201d33d2bcde1f812de257300df830b41c78712d5154357
MD5 4ad00085fdaf8ca061f774cdae137520
SHA1 c644b7d05d5499d346e2693853a283d5eff23db6
SHA512 f255f3521a41a1e2e36f6bbf3e4e4e4db02d865653ed37a4d3de193f778bd328189213eb3f0239899bae8a863fa0a3e0ab4d58140b1d4237cb55153058f86dae
SSDEEP 3072:8GwPsm1VrwxOsf0juzv8j4P1Hr6krr4IEhx9QZe2gO9mG9UHA30Vt3E/vDjb:8G/iVkO20SFgBhxtW9mG9+Umt3Ezjb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5852

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetLogicalDrives GetProcAddress GetCurrentThread WaitForMultipleObjects GlobalAlloc OpenMutexA InitializeCriticalSection AddAtomA CompareStringA CopyFileA IsValidLocale lstrcpynA OpenEventW GetModuleHandleA GetStartupInfoA GetSystemDefaultLCID GetACP GetCalendarInfoW OpenWaitableTimerA Sleep GetSystemDefaultLangID CreateSemaphoreW ExpandEnvironmentStringsW lstrlenA GetDateFormatA CreateMailslotW SystemTimeToFileTime BeginUpdateResourceA GetExpandedNameW SearchPathA DosDateTimeToFileTime GetWindowsDirectoryW GetEnvironmentStringsW GetStringTypeA QueryPerformanceCounter

user32

GetDlgItemTextW DialogBoxParamA LoadMenuIndirectW GetCapture GetClassInfoW IsIconic LoadBitmapA GetDC PeekMessageW GetMenuState SetWindowTextW GetWindowRect UpdateWindow GetForegroundWindow DialogBoxIndirectParamA ShowWindow EnumClipboardFormats AdjustWindowRect SetCursorPos ReleaseDC InsertMenuA CreateWindowExA ActivateKeyboardLayout LoadIconW DrawTextA DialogBoxIndirectParamW

gdi32

FillPath UnrealizeObject SetDIBits CreateScalableFontResourceW GetTextFaceA CreateFontW SelectClipRgn AnimatePalette

advapi32

RegOpenKeyExA RegOpenKeyW RegDeleteKeyA RegOpenKeyW

shlwapi

SHRegGetBoolUSValueW PathIsUNCServerShareA PathRemoveExtensionA PathGetDriveNumberW IntlStrEqWorkerA PathMakePrettyA StrCmpNIW UrlCombineW

comctl32

DrawStatusText CreateMappedBitmap ImageList_Write

inetcomm

MimeOleGenerateCID MimeOleSetBodyPropW EssKeyExchPreferenceDecodeEx CreateSMTPTransport MimeOleSMimeCapInit MimeOleSMimeCapGetHashAlg MimeEditIsSafeToRun MimeOleParseMhtmlUrl EssSecurityLabelEncodeEx MimeOleGetRelatedSection MimeOleGetFileInfoW EssReceiptRequestEncodeEx MimeOleCreateSecurity MimeOleFileTimeToInetDate MimeOleSMimeCapGetEncAlg MimeOleGetInternat MimeOleSMimeCapAddCert EssSignCertificateDecodeEx

oledlg

OleUIObjectPropertiesW OleUIConvertW OleUIPasteSpecialW OleUIConvertA OleUIPromptUserA OleUIAddVerbMenuW OleUIEditLinksA OleUIPasteSpecialA

Name

.qYS

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.jvNc

Size

2KB

Virtual Size

405KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bCq

Size

3KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gMFODl

Size

3KB

Virtual Size

329KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

109KB

Virtual Size

216KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ifpDc

Size

3KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.Ox

Size

2KB

Virtual Size

474KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

740B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

4ad00085fdaf8ca061f774cdae137520_NeikiAnalytics.exe

kernel32

user32

gdi32

advapi32

shlwapi

comctl32

inetcomm

oledlg

generic