7caa20a68f00ef76a9e86a12ebc16fd0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
7caa20a68f00ef76a9e86a12ebc16fd0_NeikiAnalytics.exe
Size 256KB
Sample240613-prp5dssgrr
SHA256 782d8118f676fc2cfd591b53507dbb9a5936b7266763d67e3f9d520a3f2d9f1f
MD5 7caa20a68f00ef76a9e86a12ebc16fd0
SHA1 37c568528ab377283453f5e7f93a37cd4f1485da
SHA512 c2bed7905d4db8dad909e4c2ccb0904b88a4ae9deac641775a4f08b12b26e7ae03467ad5ff4a3613f8de3bfd323583e88279f4668b0fe1ab00d1990b78c9d15f
SSDEEP 6144:3lO1E1i3Nk/Lok9iO6p6zttxp+VuIeud+4BFI:302MC/s+6pEiP7d+4BFI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7caa20a68f00ef76a9e86a12ebc16fd0_NeikiAnalytics.exe

File Explorer

7caa20a68f00ef76a9e86a12ebc16fd0_NeikiAnalytics.exe

.exe 256KB

7caa20a68f00ef76a9e86a12ebc16fd0_NeikiAnalytics.exe

IMPHASH 664a2b324a8857d7d4ab8815c756b5bb
SHA256 782d8118f676fc2cfd591b53507dbb9a5936b7266763d67e3f9d520a3f2d9f1f
MD5 7caa20a68f00ef76a9e86a12ebc16fd0
SHA1 37c568528ab377283453f5e7f93a37cd4f1485da
SHA512 c2bed7905d4db8dad909e4c2ccb0904b88a4ae9deac641775a4f08b12b26e7ae03467ad5ff4a3613f8de3bfd323583e88279f4668b0fe1ab00d1990b78c9d15f
SSDEEP 6144:3lO1E1i3Nk/Lok9iO6p6zttxp+VuIeud+4BFI:302MC/s+6pEiP7d+4BFI
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

87008

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

GetLastError SetLastError GetTickCount ExitProcess GetStartupInfoA GetStdHandle GetCommandLineA GetCurrentProcessId GetCurrentThreadId GetCurrentProcess ReadProcessMemory GetModuleFileNameA GetModuleHandleA WriteFile ReadFile CloseHandle SetFilePointer FreeLibrary LoadLibraryA GetProcAddress DeleteFileW MoveFileW CreateFileW GetFileAttributesW GetConsoleMode GetConsoleOutputCP GetOEMCP GetProcessHeap HeapAlloc HeapFree TlsAlloc TlsGetValue TlsSetValue CreateThread ExitThread LocalAlloc LocalFree Sleep SuspendThread ResumeThread TerminateThread WaitForSingleObject SetThreadPriority GetThreadPriority CreateEventA ResetEvent SetEvent InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection MultiByteToWideChar WideCharToMultiByte GetACP GetConsoleCP SetUnhandledExceptionFilter EnumResourceTypesA EnumResourceNamesA EnumResourceLanguagesA FindResourceA FindResourceExA LoadResource SizeofResource LockResource FreeResource GetWindowsDirectoryA CopyFileA CreateProcessA GetVersionExA CompareStringA GetLocaleInfoA EnumCalendarInfoA FormatMessageW CompareStringW TerminateProcess GetThreadLocale SetThreadLocale GetUserDefaultLCID

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

user32

MessageBoxA CharUpperBuffW CharLowerBuffW CharUpperA CharUpperBuffA CharLowerA CharLowerBuffA GetSystemMetrics MessageBeep

advapi32

LsaNtStatusToWinError

Name

.text

Size

81KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

96KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.l1

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.l2

Size

512B

Virtual Size

512B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

7caa20a68f00ef76a9e86a12ebc16fd0_NeikiAnalytics.exe

kernel32

oleaut32

user32

advapi32

generic