2e604a69e6295f3337f31431dd23f040_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
2e604a69e6295f3337f31431dd23f040_NeikiAnalytics.exe
Size 2.2MB
Sample240612-k8xtcaxckc
SHA256 1619a971f88e30f67b350e80943e937e6e1f4f40c32ffd50e36daf60ff9228b1
MD5 2e604a69e6295f3337f31431dd23f040
SHA1 01ea2448a257ad475e5b055d322f2212cff93eb7
SHA512 4db82566e5e92925342bf128833057d0100aeabd31e5ec86611de5b803c9a2b67b495cf5423c16a209fd8cb99b699119f70760431ec63fc774615f0b6a18650b
SSDEEP 49152:Om25DDY1oeXR/rtkkdWgt/I8CEKvSwoTP2S:OJ/IRDeQJt+TST+S
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e604a69e6295f3337f31431dd23f040_NeikiAnalytics.exe

File Explorer

2e604a69e6295f3337f31431dd23f040_NeikiAnalytics.exe

.exe 2.2MB

2e604a69e6295f3337f31431dd23f040_NeikiAnalytics.exe

IMPHASH 7ea4d3b4981577bc540bdfb878a962cf
SHA256 1619a971f88e30f67b350e80943e937e6e1f4f40c32ffd50e36daf60ff9228b1
MD5 2e604a69e6295f3337f31431dd23f040
SHA1 01ea2448a257ad475e5b055d322f2212cff93eb7
SHA512 4db82566e5e92925342bf128833057d0100aeabd31e5ec86611de5b803c9a2b67b495cf5423c16a209fd8cb99b699119f70760431ec63fc774615f0b6a18650b
SSDEEP 49152:Om25DDY1oeXR/rtkkdWgt/I8CEKvSwoTP2S:OJ/IRDeQJt+TST+S
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

81080

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\TXPCGJ\QQPCMgr_proj\13.0.46265.301_for_gf2.0_dev\Source\Setup\PackageTools\product\win32\dbginfo\kpacket.pdb

kernel32

SizeofResource LockResource LoadResource GetTempPathW CreateFileW FindResourceExW GetCurrentProcess GetFileSize GetModuleHandleW ExpandEnvironmentStringsW TerminateProcess GetWindowsDirectoryW FindFirstFileW lstrcmpW GetCurrentDirectoryW SetFileAttributesW DeleteFileW MoveFileExW GetFileAttributesW GetTickCount CreateDirectoryW GetLastError FindNextFileW SetFilePointer FindClose ReadFile RemoveDirectoryW WriteFile CreateProcessW GetModuleFileNameW WaitForSingleObject GetSystemDirectoryW MultiByteToWideChar GetCommandLineW WideCharToMultiByte UnmapViewOfFile SetEndOfFile CreateFileMappingW MapViewOfFile EnterCriticalSection GetCurrentProcessId WaitForMultipleObjects VirtualFree VirtualAlloc DeleteCriticalSection SetEvent InitializeCriticalSection ReleaseSemaphore ResetEvent CreateSemaphoreW CreateEventW GetStdHandle GetFileInformationByHandle CopyFileW SetFileTime MoveFileW GetTempFileNameW GetSystemInfo SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToSystemTime GetLocalTime WriteConsoleW GetConsoleOutputCP WriteConsoleA GetLocaleInfoW CreateFileA CloseHandle FindResourceW GetProcAddress LoadLibraryW LeaveCriticalSection FlushFileBuffers SetStdHandle LoadLibraryA GetConsoleMode GetConsoleCP GetSystemTimeAsFileTime QueryPerformanceCounter GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount GetModuleFileNameA HeapCreate GetStringTypeW RaiseException GetVersionExA HeapDestroy HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap InterlockedExchange GetACP GetLocaleInfoA GetThreadLocale InterlockedIncrement InterlockedDecrement Sleep UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent ExitThread GetCurrentThreadId CreateThread GetStartupInfoW RtlUnwind LCMapStringA LCMapStringW GetCPInfo GetOEMCP IsValidCodePage GetModuleHandleA TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError ExitProcess GetUserDefaultLCID EnumSystemLocalesA IsValidLocale GetStringTypeA

user32

UnregisterClassA CharLowerW CharUpperW GetDesktopWindow

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW

ole32

CoUninitialize CoInitialize

oleaut32

SysFreeString SysAllocString VariantClear VariantCopy

shlwapi

PathAddBackslashW PathRemoveFileSpecW PathIsDirectoryW PathAppendW PathFileExistsW