8ff9cca82d0f60da96c8e807c243fbb0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
8ff9cca82d0f60da96c8e807c243fbb0_NeikiAnalytics.exe
Size 1010KB
Sample240613-3e2vbavfmh
SHA256 b3d77f0fc32366619c98221afaea4e0d206122fc0a08c36d54fcf501ed281c22
MD5 8ff9cca82d0f60da96c8e807c243fbb0
SHA1 d35a65e48daed33fa803ec6f66759eada8df3912
SHA512 868fcfc1eb22c95c945ed245c2b3299fc32406b29c43b5f12dd7ae71d8cd5fc30b43b21bbde3ea76e9e89ae6b6d229d8ac1c60d1373b6f7d1efcf534ddea4123
SSDEEP 24576:3EpQQJvKPzvYZHTHy71e1g6p7HF/w/ftDsBUiScD7WGfWVbvf4CNQE:AKPzvoS71mgiTd8DsMcDKGfWbYCGE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ff9cca82d0f60da96c8e807c243fbb0_NeikiAnalytics.exe

File Explorer

8ff9cca82d0f60da96c8e807c243fbb0_NeikiAnalytics.exe

.exe 1010KB

8ff9cca82d0f60da96c8e807c243fbb0_NeikiAnalytics.exe

IMPHASH 2dfc2c74864b84f5530ab40a343c56d8
SHA256 b3d77f0fc32366619c98221afaea4e0d206122fc0a08c36d54fcf501ed281c22
MD5 8ff9cca82d0f60da96c8e807c243fbb0
SHA1 d35a65e48daed33fa803ec6f66759eada8df3912
SHA512 868fcfc1eb22c95c945ed245c2b3299fc32406b29c43b5f12dd7ae71d8cd5fc30b43b21bbde3ea76e9e89ae6b6d229d8ac1c60d1373b6f7d1efcf534ddea4123
SSDEEP 24576:3EpQQJvKPzvYZHTHy71e1g6p7HF/w/ftDsBUiScD7WGfWVbvf4CNQE:AKPzvoS71mgiTd8DsMcDKGfWbYCGE
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14695

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

t:\setupexe\x86\ship\0\setup.pdb

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

advapi32

RegQueryValueExA RegFlushKey RegCloseKey RegQueryValueExW RegCreateKeyExW RegOpenKeyExW RegOpenKeyExA

kernel32

lstrcmpW GetCommandLineW SetCurrentDirectoryW GlobalFree GetModuleFileNameW TlsFree LoadLibraryExW TlsSetValue TlsGetValue DeleteCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection HeapFree GetProcessHeap HeapAlloc HeapReAlloc VerifyVersionInfoW VerSetConditionMask RemoveDirectoryW GetTempPathW GetFullPathNameW CopyFileW DeleteFileW SetFileAttributesW GetFileAttributesW lstrlenW GetThreadLocale FreeLibrary GetModuleHandleW GetProcAddress lstrlenA WriteFile CreateFileW SetFilePointer FindFirstFileW FindClose IsProcessorFeaturePresent GlobalMemoryStatus GetCurrentProcess CompareStringW CompareStringA FormatMessageW ExpandEnvironmentStringsW MultiByteToWideChar WideCharToMultiByte GetVersion CloseHandle LocalFree GetTimeZoneInformation GetSystemTime SystemTimeToTzSpecificLocalTime GetCurrentProcessId GetTickCount GetCurrentThreadId SetErrorMode GetVersionExW GetLastError FindNextFileW SetLastError TlsAlloc GetCommandLineA GetVersionExA GetStartupInfoA RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetSystemTimeAsFileTime GetModuleHandleA ExitProcess GetStdHandle GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType InterlockedIncrement InterlockedDecrement HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter Sleep HeapSize GetCPInfo GetACP GetOEMCP VirtualAlloc InterlockedExchange LoadLibraryA InitializeCriticalSection GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW FlushFileBuffers CreateFileA OutputDebugStringA GetSystemInfo

ole32

CoUninitialize CoCreateInstance CLSIDFromString CLSIDFromProgID OleRun CoInitializeEx

shell32

CommandLineToArgvW SHCreateDirectoryExW

user32

CharNextA MessageBoxW CharUpperA CharUpperW CharLowerA CharLowerW

shlwapi

PathGetCharTypeW

wintrust

WinVerifyTrust

dbghelp

SymGetSymFromAddr64 SymInitialize SymGetLineFromAddr64

oleaut32

GetErrorInfo VariantChangeType SysStringLen SysStringByteLen SysAllocStringByteLen SysAllocString SysFreeString VariantInit VariantClear

msi

ord8 ord159 ord160 ord110 ord117 ord91 ord67 ord172 ord180 ord95 ord31 ord65 ord71 ord141