58814872344e4d7d023d0707a6752f00_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe
Size 2.3MB
Sample240613-da5b7ssajd
SHA256 d71f0842a82bb905cbc8abc2baee91ea8bb18c22acbb70a5a6113edbf9d40a84
MD5 58814872344e4d7d023d0707a6752f00
SHA1 ff1330b7b61ef197863e7e201a9a684091abac9a
SHA512 6b4d83f5aec0c069889cb47fe9267025ef4feacc2328d9bb38a89f937604dc81e2a054ce3958b21cdd32d4d7f2c97a60d19d79dd8244e34db274787b24d52276
SSDEEP 49152:ABFDFIFP1v+Au0zsLB5Sbux3C5yBx97g3MhJZKsM/luPrqkB1lbLorQTD2jaDUL:6FJAvu0kBgbuxS5yj9kMhJZbM/l8rVND
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe

File Explorer

58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe

.exe 2.3MB

58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe

IMPHASH 32175270e28e3716336ca59189fb67ba
SHA256 d71f0842a82bb905cbc8abc2baee91ea8bb18c22acbb70a5a6113edbf9d40a84
MD5 58814872344e4d7d023d0707a6752f00
SHA1 ff1330b7b61ef197863e7e201a9a684091abac9a
SHA512 6b4d83f5aec0c069889cb47fe9267025ef4feacc2328d9bb38a89f937604dc81e2a054ce3958b21cdd32d4d7f2c97a60d19d79dd8244e34db274787b24d52276
SSDEEP 49152:ABFDFIFP1v+Au0zsLB5Sbux3C5yBx97g3MhJZKsM/luPrqkB1lbLorQTD2jaDUL:6FJAvu0kBgbuxS5yj9kMhJZbM/l8rVND
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3454843

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

223KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.map0

Size

Virtual Size

660KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.map1

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.map2

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

58814872344e4d7d023d0707a6752f00_NeikiAnalytics.exe

kernel32

user32

gdi32

shell32

ole32

shlwapi

bcrypt

dbghelp

ws2_32

iphlpapi

gdiplus

ntdll

winmm

advapi32

generic