78fcc9368d40db8372aefc14ebaf86d0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
78fcc9368d40db8372aefc14ebaf86d0_NeikiAnalytics.exe
Size 916KB
Sample240613-ns8gpaxbla
SHA256 75cd1b21fd6d69568ac2a776f78ae099ecd8a77d92812a8e93d539a7cd343ac5
MD5 78fcc9368d40db8372aefc14ebaf86d0
SHA1 b82af20cb8d98d9f482e29e4be5e67d0a7af26c8
SHA512 4188c3aacf80f1bb735f71a3725a01f2c9171da7a513b9864a99354387d45c2226879be5a84deeea95e77af1716d3b3e73ff1e19a2e9d3d3c3aac47ad914b42a
SSDEEP 6144:SH6KLeLZifU+xdDPCvR6MA2fy6NahcPoGAjsHZrwABrxxJa/YES:3yo+xRK4Mjy6QKQGYorjlDa/ZS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78fcc9368d40db8372aefc14ebaf86d0_NeikiAnalytics.exe

File Explorer

78fcc9368d40db8372aefc14ebaf86d0_NeikiAnalytics.exe

.exe 916KB

78fcc9368d40db8372aefc14ebaf86d0_NeikiAnalytics.exe

IMPHASH fda96c3a1f41c51b4561efbd00bd37cb
SHA256 75cd1b21fd6d69568ac2a776f78ae099ecd8a77d92812a8e93d539a7cd343ac5
MD5 78fcc9368d40db8372aefc14ebaf86d0
SHA1 b82af20cb8d98d9f482e29e4be5e67d0a7af26c8
SHA512 4188c3aacf80f1bb735f71a3725a01f2c9171da7a513b9864a99354387d45c2226879be5a84deeea95e77af1716d3b3e73ff1e19a2e9d3d3c3aac47ad914b42a
SSDEEP 6144:SH6KLeLZifU+xdDPCvR6MA2fy6NahcPoGAjsHZrwABrxxJa/YES:3yo+xRK4Mjy6QKQGYorjlDa/ZS
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

87008

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetLastError SetLastError GetTickCount ExitProcess GetStartupInfoA GetStdHandle GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer FreeLibrary LoadLibraryA GetProcAddress DeleteFileW MoveFileW CreateFileW GetFileAttributesW GetConsoleMode GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsGetValue TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP SetUnhandledExceptionFilter EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource GetWindowsDirectoryA CopyFileA CreateProcessA GetVersionExA CompareStringA GetLocaleInfoA EnumCalendarInfoA FormatMessageW CompareStringW TerminateProcess GetThreadLocale SetThreadLocale GetUserDefaultLCID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

user32

MessageBoxA CharUpperBuffW CharLowerBuffW CharUpperA CharUpperBuffA CharLowerA CharLowerBuffA GetSystemMetrics MessageBeep

gdi32

EnumFontsA

Name

.text

Size

84KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

8KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

636KB

Virtual Size

632KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

12KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

4KB

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

160KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.l1

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

78fcc9368d40db8372aefc14ebaf86d0_NeikiAnalytics.exe

kernel32

oleaut32

user32

gdi32

generic