55c88a2f483e264295aef03a3938f060_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
55c88a2f483e264295aef03a3938f060_NeikiAnalytics.exe
Size 291KB
Sample240613-chewvathjp
SHA256 c97896a312f257f9a14b90e2481e7c7e8ba7a949eb43e10d5e91a7198caa31f4
MD5 55c88a2f483e264295aef03a3938f060
SHA1 7f503f364b225192f5e50ae7dae59e56903581d7
SHA512 2cc822e33e9f103adf059a8833c4974b6740d7c76e29c9979629defad7c108a206ead3f499a14d8fcba77b81e8c9b52eebde078b45725adfd97fea5401b8830e
SSDEEP 3072:i6jR7tyWNFHJ/HO/hpfk+WJ5MbvnjIxl0qtUh5rm5/F7o6iLlN3vuJO:JjR7VNFHJ/Cfk+WELWXUhFm8AO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55c88a2f483e264295aef03a3938f060_NeikiAnalytics.exe

File Explorer

55c88a2f483e264295aef03a3938f060_NeikiAnalytics.exe

.exe 291KB

55c88a2f483e264295aef03a3938f060_NeikiAnalytics.exe

IMPHASH b01267edba564c5cb0f92af8ea0b22f7
SHA256 c97896a312f257f9a14b90e2481e7c7e8ba7a949eb43e10d5e91a7198caa31f4
MD5 55c88a2f483e264295aef03a3938f060
SHA1 7f503f364b225192f5e50ae7dae59e56903581d7
SHA512 2cc822e33e9f103adf059a8833c4974b6740d7c76e29c9979629defad7c108a206ead3f499a14d8fcba77b81e8c9b52eebde078b45725adfd97fea5401b8830e
SSDEEP 3072:i6jR7tyWNFHJ/HO/hpfk+WJ5MbvnjIxl0qtUh5rm5/F7o6iLlN3vuJO:JjR7VNFHJ/Cfk+WELWXUhFm8AO
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5456

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

comctl32

InitCommonControls

comdlg32

GetOpenFileNameA

kernel32

DeleteCriticalSection EnterCriticalSection FindClose FindFirstFileA FindNextFileA FreeLibrary GetCurrentDirectoryA GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetProcAddress GetStartupInfoA GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryA QueryPerformanceCounter RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetCurrentDirectoryA SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcrt

_strdup _stricmp _strnicmp __dllonexit __getmainargs __initenv __iob_func __lconv_init __set_app_type __setusermatherr _acmdln _amsg_exit _cexit _fmode _initterm _localtime64 _lock _onexit _setjmp _stat64 _time64 _unlock _vsnprintf abort atof atoi atol calloc exit fclose fopen fprintf fputc fputs fread free fseek ftell fwrite malloc memcpy memmove memset printf putchar realloc signal sprintf strcat strchr strcmp strcpy strftime strlen strncat strncmp strncpy strstr tolower toupper vfprintf

user32

AdjustWindowRectEx AppendMenuA BeginPaint BringWindowToTop CreateMenu CreateWindowExA DefFrameProcA DefMDIChildProcA DefWindowProcA DestroyWindow DispatchMessageA EndPaint GetClientRect GetMessageA GetSystemMetrics GetWindowTextA GetWindowTextLengthA InvalidateRect LoadCursorA MessageBoxA PeekMessageA RedrawWindow RegisterClassA SendMessageA SetFocus SetMenu SetWindowPos SetWindowTextA ShowWindow TranslateMDISysAccel TranslateMessage UpdateWindow

Name

.text

Size

221KB

Virtual Size

220KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

903KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

55c88a2f483e264295aef03a3938f060_NeikiAnalytics.exe

comctl32

comdlg32

kernel32

msvcrt

user32

generic