697036903a79867ca14d917335eaa350_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
697036903a79867ca14d917335eaa350_NeikiAnalytics.exe
Size 603KB
Sample240613-jcb2bstbrj
SHA256 fc500eb9be79507b4b2984177c752dbcb5d49023924a505311e584b05e1f9bc7
MD5 697036903a79867ca14d917335eaa350
SHA1 f6a4659fe2ea53c2364bc5b1ef51649b496cf9fa
SHA512 134d34fec119d6393705b22e4e23f7f2c141cc19386eb31f557e7d4ca30b8d8f8be2eb5b923f779974620e8d6c56d6f2021d193fed8e604f0fc661efbeb8e547
SSDEEP 12288:XAvFpASUDvpg6iuLmt42bL7ZYjk2Daa8EHCL26mcrniAxPPetUJEkdp/R:XAvFpLUDvpg6AtlbniXHhHwp7Dp/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
697036903a79867ca14d917335eaa350_NeikiAnalytics.exe

File Explorer

697036903a79867ca14d917335eaa350_NeikiAnalytics.exe

.exe 603KB

697036903a79867ca14d917335eaa350_NeikiAnalytics.exe

IMPHASH 8e382beb8f618c29dede8f29725989ad
SHA256 fc500eb9be79507b4b2984177c752dbcb5d49023924a505311e584b05e1f9bc7
MD5 697036903a79867ca14d917335eaa350
SHA1 f6a4659fe2ea53c2364bc5b1ef51649b496cf9fa
SHA512 134d34fec119d6393705b22e4e23f7f2c141cc19386eb31f557e7d4ca30b8d8f8be2eb5b923f779974620e8d6c56d6f2021d193fed8e604f0fc661efbeb8e547
SSDEEP 12288:XAvFpASUDvpg6iuLmt42bL7ZYjk2Daa8EHCL26mcrniAxPPetUJEkdp/R:XAvFpLUDvpg6AtlbniXHhHwp7Dp/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

24369

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

t:\onenote\x86\ship\0\onelev.pdb

kernel32

lstrlenW RaiseException InitializeCriticalSection DeleteCriticalSection GetLastError CloseHandle WaitForSingleObject GetModuleFileNameW Sleep EnterCriticalSection LeaveCriticalSection GetModuleHandleW GetCurrentThreadId CreateThread CreateEventW SetEvent GetCommandLineW LoadLibraryA FreeLibrary LocalAlloc HeapSize HeapReAlloc HeapDestroy GetVersionExA SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetStartupInfoA InterlockedCompareExchange InterlockedExchange LoadLibraryW HeapAlloc HeapFree GetTempPathA GetTempFileNameA CreateProcessA GetProcAddress GetProcessHeap GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter VirtualProtect GetACP GetLocaleInfoA GetThreadLocale IsDebuggerPresent

user32

DispatchMessageW TranslateMessage CharUpperW CharNextW UnregisterClassA GetMessageW PostThreadMessageW

msvcr80

_cexit _XcptFilter _ismbblead exit _acmdln _initterm _initterm_e _configthreadlocale __setusermatherr _adjust_fdiv __p__commode __p__fmode _encode_pointer __set_app_type _except_handler4_common ?terminate@@YAXXZ _unlock __dllonexit _lock _onexit _decode_pointer _crt_debugger_hook _invoke_watson _controlfp_s ?_type_info_dtor_internal_method@type_info@@QAEXXZ __getmainargs _amsg_exit fopen_s fwprintf_s fclose vsprintf_s vswprintf_s wcsrchr memset calloc memmove_s memcpy_s malloc realloc ??2@YAPAXI@Z __CxxFrameHandler3 ??_U@YAPAXI@Z ??_V@YAXPAX@Z wcscat_s wcsncpy_s wcscpy_s _CxxThrowException free ??3@YAXPAX@Z _exit

netapi32

NetShareAdd

secur32

GetUserNameExW