6d07ebb10f0c376fe83728c5e4903910_NeikiAnalytics[.]exe

General

Target
6d07ebb10f0c376fe83728c5e4903910_NeikiAnalytics.exe
Size 844KB
Sample240613-ket6cs1dmg
SHA256 e180262fa23508eb588a22bb9faf2dd2a3cf275cb12f2d402a2d9b9ce23c5455
MD5 6d07ebb10f0c376fe83728c5e4903910
SHA1 db30bc8fa70e00cb7d8063bc438d37f4621a6b07
SHA512 013fdbc5619b69c597e5b2bfd5267be010d3268b325f260bd213ab2c0b9461b7bed9ec03aac05b336997489076e02b4da5a769d07fb1d598a70727e0b1362fed
SSDEEP 12288:C9MlqH7DewJpg/AaeSsVnsSATexWXsl6ydTI87ybvP9ZNIET+jEM7czXUCMlr:CBOIZnC062EZvP9IET+4M7cz2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d07ebb10f0c376fe83728c5e4903910_NeikiAnalytics.exe

File Explorer

6d07ebb10f0c376fe83728c5e4903910_NeikiAnalytics.exe

.dll 844KB

6d07ebb10f0c376fe83728c5e4903910_NeikiAnalytics.exe

IMPHASH 5daa11fd704e5b8642532f58c86b8044
SHA256 e180262fa23508eb588a22bb9faf2dd2a3cf275cb12f2d402a2d9b9ce23c5455
MD5 6d07ebb10f0c376fe83728c5e4903910
SHA1 db30bc8fa70e00cb7d8063bc438d37f4621a6b07
SHA512 013fdbc5619b69c597e5b2bfd5267be010d3268b325f260bd213ab2c0b9461b7bed9ec03aac05b336997489076e02b4da5a769d07fb1d598a70727e0b1362fed
SSDEEP 12288:C9MlqH7DewJpg/AaeSsVnsSATexWXsl6ydTI87ybvP9ZNIET+jEM7czXUCMlr:CBOIZnC062EZvP9IET+4M7cz2
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

242197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\CZZ\复件 z00105600_fenzhiC51\WT_UTPS_CODE\UTPS_V100R001\utps\solution\win32\NDISAPI\Release\NDISAPI.pdb

setupapi

SetupDiGetClassDevsA SetupDiDestroyDeviceInfoList SetupDiGetDeviceRegistryPropertyA CM_Get_DevNode_Status SetupDiCallClassInstaller CM_Reenumerate_DevNode SetupDiEnumDeviceInfo SetupDiGetDeviceInstanceIdA CM_Locate_DevNodeA

kernel32

LCMapStringW WriteFile CloseHandle CreateFileA CreateMutexA GetModuleFileNameA ReleaseMutex SetFilePointer WaitForSingleObject GetLocalTime Sleep SetEvent ResetEvent CreateEventA OutputDebugStringA InitializeCriticalSection DeleteCriticalSection CancelIo CreateThread GetOverlappedResult ReadFile LeaveCriticalSection EnterCriticalSection DeviceIoControl InterlockedExchange GetACP GetLocaleInfoA GetVersionExA RaiseException WaitForMultipleObjects TerminateThread LCMapStringA SetStdHandle FlushFileBuffers GetLocaleInfoW InterlockedDecrement GetLastError QueryPerformanceCounter ExitProcess RtlUnwind HeapFree GetSystemTimeAsFileTime HeapAlloc GetCurrentThreadId GetCommandLineA InterlockedIncrement GetTickCount GetCurrentProcessId TlsAlloc SetLastError TlsFree TlsSetValue TlsGetValue GetProcAddress GetModuleHandleA SetUnhandledExceptionFilter HeapReAlloc TerminateProcess GetCurrentProcess HeapSize HeapDestroy HeapCreate VirtualFree VirtualAlloc IsBadWritePtr VirtualQuery SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW UnhandledExceptionFilter LoadLibraryA IsBadReadPtr IsBadCodePtr GetOEMCP GetCPInfo VirtualProtect GetSystemInfo MultiByteToWideChar GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage

advapi32

RegEnumKeyExA RegNotifyChangeKeyValue RegOpenKeyExA RegCreateKeyExA RegQueryValueExA RegSetValueExA RegCloseKey RegQueryInfoKeyA

Sharing