6a36638650b9106593bed786aa9b1340_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
6a36638650b9106593bed786aa9b1340_NeikiAnalytics.exe
Size 61KB
Sample240613-jmdynstepk
SHA256 6811e5666368ffe7ad71d8a43260f117b776b3b151c8ae882494a260771aab72
MD5 6a36638650b9106593bed786aa9b1340
SHA1 bc21391f6d1348fdf46e205d604015a5cd88646c
SHA512 c08376d7d1588d65c24d92735d33f05f132fd34453db88182b0b8403280695fcf685d6ed1fffe46368802f9eb41bf237417a295d6594b97e2a8308a094119f4d
SSDEEP 768:NeJIvFKPZo2smEasjcj29NWngAHxcwKppEaxglaX5uA:NQIvEPZo6Ead29NQgA2wzle5
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a36638650b9106593bed786aa9b1340_NeikiAnalytics.exe

File Explorer

6a36638650b9106593bed786aa9b1340_NeikiAnalytics.exe

.exe 61KB

6a36638650b9106593bed786aa9b1340_NeikiAnalytics.exe

IMPHASH 9a423a1a41e11c85a6586c49a7e083df
SHA256 6811e5666368ffe7ad71d8a43260f117b776b3b151c8ae882494a260771aab72
MD5 6a36638650b9106593bed786aa9b1340
SHA1 bc21391f6d1348fdf46e205d604015a5cd88646c
SHA512 c08376d7d1588d65c24d92735d33f05f132fd34453db88182b0b8403280695fcf685d6ed1fffe46368802f9eb41bf237417a295d6594b97e2a8308a094119f4d
SSDEEP 768:NeJIvFKPZo2smEasjcj29NWngAHxcwKppEaxglaX5uA:NQIvEPZo6Ead29NQgA2wzle5
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

45894

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

HttpSendRequestW InternetConnectW HttpOpenRequestW InternetSetPerSiteCookieDecisionW InternetOpenUrlW InternetAttemptConnect InternetOpenW InternetReadFile InternetClearAllPerSiteCookieDecisions InternetCloseHandle InternetQueryDataAvailable InternetSetOptionW

shlwapi

StrStrIW PathMatchSpecW PathCombineW wvnsprintfW StrStrIA PathRemoveFileSpecW

kernel32

TerminateProcess GetCurrentProcess UnhandledExceptionFilter IsDebuggerPresent GetVersionExA GetSystemTime RtlUnwind WideCharToMultiByte MultiByteToWideChar HeapCreate CopyFileW CreateThread WaitForMultipleObjects GetTickCount DeleteFileW CreateProcessW SetUnhandledExceptionFilter ExitProcess GetLastError LoadLibraryW GetProcAddress Sleep VirtualProtect GetPrivateProfileIntW ExpandEnvironmentStringsW GetPrivateProfileStringW SetFilePointer SetEndOfFile GetVersionExW HeapAlloc SetWaitableTimer SystemTimeToFileTime CreateWaitableTimerW FindNextFileW HeapFree ReadFile GetModuleFileNameW GetFileTime WaitForSingleObject GetTimeZoneInformation CreateFileW CloseHandle GetFileSizeEx VirtualFree GetProcessHeap GetCurrentDirectoryW VirtualAlloc VirtualQuery HeapReAlloc GetFileSize FindClose WriteFile GetLocalTime FindFirstFileW GetModuleHandleW GetCommandLineW

user32

GetWindowLongW DispatchMessageW GetForegroundWindow CharLowerW CreateWindowExW FindWindowW PeekMessageW SetForegroundWindow GetSystemMetrics MessageBoxW SetWindowPos SetWindowLongW SetParent

advapi32

RegOpenKeyExW RegEnumKeyExW RegQueryValueExW RegSetValueExW RegCreateKeyExW RegCloseKey

shell32

SHGetFolderPathW

ole32

CoCreateInstance OleInitialize CoInitialize

oleaut32

SysFreeString VariantInit SysAllocString VariantClear