6ef34b65e98eee369e8095aa976a6d90_NeikiAnalytics[.]exe

General

Target
6ef34b65e98eee369e8095aa976a6d90_NeikiAnalytics.exe
Size 81KB
Sample240613-kzamfssbmf
SHA256 85e31e68a034235f89f5250ebf78c7dfaf81ca4b2471aebb2cf001bcf1b90213
MD5 6ef34b65e98eee369e8095aa976a6d90
SHA1 a2ab5589ead1f81deefa44999a99dbc805c72dfc
SHA512 4009ba4855b329cbd1c029d71ec5a9b5787de6dceb02e734b3545a358500e9bdd5bf0a15e0d13f895f977b58d1ce1ada0ee8ba977ec32b0cfe9a9a5f5cf86791
SSDEEP 1536:ic+UPvS0RKCmqAvj45Hx8u05iecuYSoosWaocdBkez0U+GB:h+5oxmqAiR8+/RBkez0U+C
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ef34b65e98eee369e8095aa976a6d90_NeikiAnalytics.exe

File Explorer

6ef34b65e98eee369e8095aa976a6d90_NeikiAnalytics.exe

.dll 81KB

6ef34b65e98eee369e8095aa976a6d90_NeikiAnalytics.exe

IMPHASH 21c3f381268e047a28061019125ad34a
SHA256 85e31e68a034235f89f5250ebf78c7dfaf81ca4b2471aebb2cf001bcf1b90213
MD5 6ef34b65e98eee369e8095aa976a6d90
SHA1 a2ab5589ead1f81deefa44999a99dbc805c72dfc
SHA512 4009ba4855b329cbd1c029d71ec5a9b5787de6dceb02e734b3545a358500e9bdd5bf0a15e0d13f895f977b58d1ce1ada0ee8ba977ec32b0cfe9a9a5f5cf86791
SSDEEP 1536:ic+UPvS0RKCmqAvj45Hx8u05iecuYSoosWaocdBkez0U+GB:h+5oxmqAiR8+/RBkez0U+C
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5958

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

ReadFile GetModuleFileNameA WriteProcessMemory HeapFree CreateMutexA OpenProcess Sleep GetLastError CreateFileA LoadLibraryA CloseHandle HeapAlloc VirtualAllocEx GetFileSize ExitProcess GetCurrentProcessId GetProcessHeap FreeLibrary CreateRemoteThread GetComputerNameA GetProcAddress WriteConsoleW CreateFileW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer RaiseException GetModuleHandleExW GetModuleFileNameW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode SetFilePointerEx DecodePointer

Sharing