1e19bf1765877b8e28368da83a99e770_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
1e19bf1765877b8e28368da83a99e770_NeikiAnalytics.exe
Size 433KB
Sample240612-e2qtka1bpm
SHA256 b822f5174e6d8b280b12ac77f36973c6e70e452149edeaa0d098ad55881cfc37
MD5 1e19bf1765877b8e28368da83a99e770
SHA1 3ea69858926a492a59af9cf9aeb799245067b777
SHA512 c89591460410c059cbb37213562e934936707072b4a6cd28907e4ebc48413c7f1f84d667f0447aba61bbf1379568c3eb755e26b2f5b835285a2836421be500e6
SSDEEP 12288:d7+OeO+OeNhBBhhBBRhyBVLAaTeEWuKaLfmtikNAFuv:dAhyDLAapWuKaL1kN/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e19bf1765877b8e28368da83a99e770_NeikiAnalytics.exe

File Explorer

1e19bf1765877b8e28368da83a99e770_NeikiAnalytics.exe

.exe 433KB

1e19bf1765877b8e28368da83a99e770_NeikiAnalytics.exe

IMPHASH 3b7f953295b7893f34e9a0b26ca60300
SHA256 b822f5174e6d8b280b12ac77f36973c6e70e452149edeaa0d098ad55881cfc37
MD5 1e19bf1765877b8e28368da83a99e770
SHA1 3ea69858926a492a59af9cf9aeb799245067b777
SHA512 c89591460410c059cbb37213562e934936707072b4a6cd28907e4ebc48413c7f1f84d667f0447aba61bbf1379568c3eb755e26b2f5b835285a2836421be500e6
SSDEEP 12288:d7+OeO+OeNhBBhhBBRhyBVLAaTeEWuKaLfmtikNAFuv:dAhyDLAapWuKaL1kN/
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

132181

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA GetModuleHandleA GetModuleFileNameA LockResource GetVersionExA lstrcpynA lstrcpynW MulDiv GetTickCount CopyFileA GetTempFileNameA GetTempPathA DeleteFileA Sleep EnterCriticalSection LeaveCriticalSection SetEnvironmentVariableA CompareStringW CompareStringA SetEndOfFile GetFileAttributesA CreateProcessA WaitForSingleObject GetExitCodeProcess WriteConsoleW GetConsoleOutputCP WriteConsoleA CreateFileA FlushFileBuffers SetStdHandle SetLastError GetStringTypeW GetStringTypeA GetLocaleInfoA GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings UpdateResourceA InitializeCriticalSectionAndSpinCount GetConsoleMode GetConsoleCP SetFilePointer GetFileType SetHandleCount ReadFile HeapSize HeapReAlloc HeapCreate GetStdHandle WriteFile TlsFree TlsSetValue TlsAlloc TlsGetValue IsValidCodePage GetOEMCP GetACP GetCPInfo IsDBCSLeadByte lstrcmpiA lstrlenA InterlockedIncrement InterlockedDecrement lstrlenW WideCharToMultiByte MultiByteToWideChar BeginUpdateResourceA GetCurrentProcess FlushInstructionCache UnmapViewOfFile CreateFileMappingA MapViewOfFileEx CloseHandle GetLastError DeleteCriticalSection InitializeCriticalSection RaiseException LCMapStringW LCMapStringA GetSystemTimeAsFileTime GetStartupInfoA GetCommandLineA ExitProcess VirtualQuery GetSystemInfo GetModuleHandleW VirtualProtect RtlUnwind IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess EndUpdateResourceA FreeEnvironmentStringsA GetCurrentThreadId QueryPerformanceCounter InterlockedCompareExchange HeapFree GetProcessHeap HeapAlloc GetProcAddress LoadLibraryA IsProcessorFeaturePresent VirtualFree VirtualAlloc

user32

GetDlgItemTextA RegisterWindowMessageA CheckMenuItem UnregisterClassA wvsprintfA SetWindowLongA SetForegroundWindow GetWindowTextA GetActiveWindow ReleaseDC GetDC PostQuitMessage InvalidateRect GetTopWindow IsDialogMessageA GetWindowTextLengthA PostMessageA LoadStringW SetFocus SendMessageA TranslateAcceleratorA GetWindow GetWindowRect SystemParametersInfoA GetClientRect GetMenu SetWindowPos GetDlgItem GetParent SetDlgItemTextA MapWindowPoints SetWindowTextA EndDialog MessageBoxA LoadStringA LoadMenuA LoadAcceleratorsA DialogBoxParamA CallWindowProcA GetWindowLongA CreateWindowExA DestroyWindow GetClassInfoExA LoadCursorA LoadImageA RegisterClassExA DefWindowProcA CharNextA PeekMessageA GetMessageA TranslateMessage DispatchMessageA ShowWindow

gdi32

DeleteDC CreateFontA DeleteObject GetDeviceCaps

comdlg32

ReplaceTextA GetOpenFileNameA GetSaveFileNameA FindTextA

advapi32

RegCreateKeyExA RegEnumKeyExA RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegCloseKey RegDeleteValueA RegDeleteKeyA

shell32

DragQueryFileA DragAcceptFiles ShellExecuteA DragFinish

ole32

CoInitialize CoUninitialize CoTaskMemFree CoCreateInstance CoTaskMemAlloc CoTaskMemRealloc

oleaut32

VarUI4FromStr

shlwapi

PathFileExistsA

comctl32

InitCommonControlsEx ord6