1c55352d1fb985d45c2a68726a8119c0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
1c55352d1fb985d45c2a68726a8119c0_NeikiAnalytics.exe
Size 46KB
Sample240612-ee5zzazgjp
SHA256 744e2eb9fe3fe90caac6bcea6d6064c3481fa4ae8a45e78758df1a3cf30d2075
MD5 1c55352d1fb985d45c2a68726a8119c0
SHA1 2abd1a0e04aa01157371b8e9a2e09bb199d62c92
SHA512 5cdbd3897fda02e659b9853e72f9da670db1cb64c037fafb9e98c63c04f2c10426cb5165ebb1f0373f05946e50a4e67cf688e121e7a8e2694b911160e3a99d53
SSDEEP 768:5ojII1BVCBVTEMO45vmyyB/UDmNay/PLbF2sBdiU:5o0OBVCBVYMOImye/rNay/PnR9
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c55352d1fb985d45c2a68726a8119c0_NeikiAnalytics.exe

File Explorer

1c55352d1fb985d45c2a68726a8119c0_NeikiAnalytics.exe

.exe 46KB

1c55352d1fb985d45c2a68726a8119c0_NeikiAnalytics.exe

IMPHASH ce18ca977171b5f3167f18db7e14983c
SHA256 744e2eb9fe3fe90caac6bcea6d6064c3481fa4ae8a45e78758df1a3cf30d2075
MD5 1c55352d1fb985d45c2a68726a8119c0
SHA1 2abd1a0e04aa01157371b8e9a2e09bb199d62c92
SHA512 5cdbd3897fda02e659b9853e72f9da670db1cb64c037fafb9e98c63c04f2c10426cb5165ebb1f0373f05946e50a4e67cf688e121e7a8e2694b911160e3a99d53
SSDEEP 768:5ojII1BVCBVTEMO45vmyyB/UDmNay/PLbF2sBdiU:5o0OBVCBVYMOImye/rNay/PnR9
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

25900

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

llama

ggml_print_backtrace

msvcp140

?eof@ios_base@std@@QEBA_NXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Xlength_error@std@@YAXPEBD@Z ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ??7ios_base@std@@QEBA_NXZ ?_Syserror_map@std@@YAPEBDH@Z ??Bid@locale@std@@QEAA_KXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??Bios_base@std@@QEBA_NXZ ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z

vcruntime140

__current_exception __C_specific_handler __current_exception_context memcpy _CxxThrowException __std_exception_destroy __std_exception_copy memmove memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e _exit exit _set_app_type __p___argv _cexit _c_exit _get_initial_narrow_environment _initialize_narrow_environment _seh_filter_exe _initialize_onexit_table _register_onexit_function _configure_narrow_argv terminate _register_thread_local_exe_atexit_callback abort _invalid_parameter_noinfo_noreturn __p___argc _crt_atexit

api-ms-win-crt-stdio-l1-1-0

_fseeki64 fsetpos fread fputc fgetpos fgetc fwrite fclose _get_stream_buffer_pointers __p__commode _set_fmode __stdio_common_vfprintf __acrt_iob_func ungetc setvbuf fflush

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-heap-l1-1-0

_callnewh malloc _set_new_mode free

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

TerminateProcess GetCurrentProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent GetModuleHandleW