55a4c87b6955b589dc7ef13940b1e120_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
55a4c87b6955b589dc7ef13940b1e120_NeikiAnalytics.exe
Size 3.3MB
Sample240613-cfyaeatgnj
SHA256 52e5181c321b0c6e1e21df088af6104e2daadc48d2bcbe3fbd4cbe91ab8f4066
MD5 55a4c87b6955b589dc7ef13940b1e120
SHA1 330e55569f07b84cddf93ec89fc183f8665c840d
SHA512 62b7aee8a80eb71dc2f1a751b79358e4bdc703dff1a2b4efb5bb39f172aa1a9055be18a431dfcd482892c672ccc6cea1d5dbe2ae72f174877e5c1a92725c4fe2
SSDEEP 98304:V18zkXyPterEf7520KrjYCsY0geuubXj73CZHFdi4VEk0V:VHElN2jYmeDP3ULiJk0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55a4c87b6955b589dc7ef13940b1e120_NeikiAnalytics.exe

File Explorer

55a4c87b6955b589dc7ef13940b1e120_NeikiAnalytics.exe

.exe 3.3MB

55a4c87b6955b589dc7ef13940b1e120_NeikiAnalytics.exe

IMPHASH 092eb6daba2f17cbda102fd1a32acd00
SHA256 52e5181c321b0c6e1e21df088af6104e2daadc48d2bcbe3fbd4cbe91ab8f4066
MD5 55a4c87b6955b589dc7ef13940b1e120
SHA1 330e55569f07b84cddf93ec89fc183f8665c840d
SHA512 62b7aee8a80eb71dc2f1a751b79358e4bdc703dff1a2b4efb5bb39f172aa1a9055be18a431dfcd482892c672ccc6cea1d5dbe2ae72f174877e5c1a92725c4fe2
SSDEEP 98304:V18zkXyPterEf7520KrjYCsY0geuubXj73CZHFdi4VEk0V:VHElN2jYmeDP3ULiJk0
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

kernel32

GetDriveTypeA HeapFree FormatMessageA LeaveCriticalSection DeleteFileA EnterCriticalSection TerminateProcess WaitForMultipleObjects CreateEventW SetEvent Sleep SetEnvironmentVariableA GetEnvironmentVariableA WideCharToMultiByte HeapAlloc SetLastError WriteFile MoveFileA ExitProcess DeleteCriticalSection FlushFileBuffers GetVersionExA WaitForSingleObject OpenEventA GetCurrentProcess GetFileAttributesA GetCommandLineA GetModuleFileNameA CreateFileA FindNextFileA FindFirstFileA CopyFileA SetFileAttributesA SystemTimeToFileTime GetSystemTime GetDiskFreeSpaceA QueryDosDeviceA GetCurrentDirectoryA SetEndOfFile SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime GetExitCodeProcess CreateProcessA ExpandEnvironmentStringsA GetFileSize CreateThread CreateEventA GetProcessHeap InitializeCriticalSectionAndSpinCount GetModuleHandleA QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime SetUnhandledExceptionFilter CloseHandle DeviceIoControl GetSystemDirectoryA LoadLibraryA GetProcAddress FreeLibrary SetErrorMode GetTickCount CreateDirectoryA GetLastError RemoveDirectoryA MoveFileExA SetFilePointer FindClose ReadFile

msvcrt

strchr _strnicmp _stricmp strrchr _strlwr strncpy strstr _snprintf sprintf

advapi32

AllocateAndInitializeSid GetTokenInformation GetLengthSid InitiateSystemShutdownA CryptReleaseContext CryptGenRandom CryptAcquireContextA SetSecurityDescriptorDacl AddAccessAllowedAce InitializeAcl InitializeSecurityDescriptor OpenProcessToken

user32

ShowWindow SendDlgItemMessageA SendMessageA DialogBoxParamA LoadStringA EndDialog SetParent MessageBoxA

ntdll

NtShutdownSystem NtAdjustPrivilegesToken NtClose NtOpenProcessToken

comctl32

ord17

shell32

SHBrowseForFolderA SHGetPathFromIDListA