814b7b8c952a12d32592b8a4dd5dec70_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
814b7b8c952a12d32592b8a4dd5dec70_NeikiAnalytics.exe
Size 3.6MB
Sample240613-q26ess1eqa
SHA256 7719512191ca2749b06e3acd411ffb005255cb1b55c142f78d0d1a39fdb96267
MD5 814b7b8c952a12d32592b8a4dd5dec70
SHA1 91b81ac14dc85ece46a0166d9d3fe5ed0d653f4d
SHA512 935c20ab40ccd84efe31cbfc32f58cf80a73b7679833ced377034ba78ec4c3faf690c6ba16f4d3625d14557f81654e4b780a8c6428a74652ff6dc979c2768320
SSDEEP 49152:HrqFNHA0sqBRTFXIgeElWEmsZbcjTmV8h6rc15K5mppbIar24SP1sEZpqK3iU7EY:HrwNvDLICV8suT724S1SmsM
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

814b7b8c952a12d32592b8a4dd5dec70_NeikiAnalytics.exe

.dll 3.6MB

814b7b8c952a12d32592b8a4dd5dec70_NeikiAnalytics.exe

IMPHASH 7164b225185485aa67b055730bc2f969
SHA256 7719512191ca2749b06e3acd411ffb005255cb1b55c142f78d0d1a39fdb96267
MD5 814b7b8c952a12d32592b8a4dd5dec70
SHA1 91b81ac14dc85ece46a0166d9d3fe5ed0d653f4d
SHA512 935c20ab40ccd84efe31cbfc32f58cf80a73b7679833ced377034ba78ec4c3faf690c6ba16f4d3625d14557f81654e4b780a8c6428a74652ff6dc979c2768320
SSDEEP 49152:HrqFNHA0sqBRTFXIgeElWEmsZbcjTmV8h6rc15K5mppbIar24SP1sEZpqK3iU7EY:HrwNvDLICV8suT724S1SmsM
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

67:39:21:d1:1d:e6:78:c2:40:9a:e0:4c:c6:c3:a4:b4:b5:a6:bc:83:b1:d8:44:44:fd:74:77:a6:07:ba:e2:f2

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 12, 2024

PE Signature issue

Digest

2b:e3:0c:8b:bb:bc:5c:35:44:7f:70:a7:08:a6:e3:19:89:72:bb:da

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jun 12, 2024

Minor OS version

Major OS version

Entry point

2792112

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D3DCompiler_47.pdb

api-ms-win-crt-string-l1-1-0

wcsncmp strnlen __isascii memset strncmp

api-ms-win-crt-math-l1-1-0

_finite _isnan

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm _clearfp _controlfp

api-ms-win-crt-private-l1-1-0

_o__atoi64 _o__callnewh _o__cexit _o__chsize_s _o__CIacos _o__CIasin _o__CIatan _o__CIatan2 _o__CIcos _o__CIcosh _o__CIexp _o__CIfmod _o__CIlog _o__CIpow _o__CIsin _o__CIsinh _o__CIsqrt _o__CItan _o__CItanh _o__close _o__configure_narrow_argv _o__crt_atexit _o__errno _o__execute_onexit_table _o__filelengthi64 _o__fpclass _o__get_osfhandle _o__initialize_narrow_environment _o__initialize_onexit_table _o__invalid_parameter_noinfo _o__lseeki64 _o__mbscmp _o__mbstrlen _o__memicmp _o__open_osfhandle _o__purecall _o__read _o__register_onexit_function _o__seh_filter_dll _o__strdup _o__stricmp _o__strnicmp _o__strtoui64 _o__wcsdup _o__wcsicmp _o__wcsnicmp _o__wfsopen _o__wfullpath _o__wgetenv _o__wmakepath_s _o__write _o__wsopen_s _o__wsplitpath_s _o__wtoi _o_atof _o_atoi _o_bsearch _o_calloc _o_ceil _o_fclose _o_floor _o_fread _o_free _o_fseek _o_ftell _o_getenv _o_isalnum _o_isalpha _o_isdigit _o_isspace _o_isxdigit _o_malloc _o_modf _o_qsort _o_setlocale _o_strcat_s _o_strcpy_s _o_strncpy_s _o_strtod _o_strtoul _o_terminate _o_tolower _o_toupper _o_towlower _o_wcscat_s _o_wcscpy_s _o_wcsncat_s _o_wcsncpy_s _o_wcstoul strrchr strchr _except_handler4_common _o___stdio_common_vswprintf_s _o___stdio_common_vswprintf _o___stdio_common_vsscanf _o___stdio_common_vsprintf_s _o___stdio_common_vsprintf _o___stdio_common_vsnwprintf_s _o___stdio_common_vsnprintf_s _o___std_type_info_destroy_list memcpy _CxxThrowException memmove strstr __unDName wcschr wcsrchr __CxxFrameHandler3

kernel32

CreateFileA FlushViewOfFile MapViewOfFileEx SetFilePointer GetModuleFileNameA InitializeCriticalSectionAndSpinCount ExpandEnvironmentStringsW DeviceIoControl SetFilePointerEx SetEndOfFile GetFileType DeleteFileW SetFileAttributesW GetFileAttributesW LCMapStringW SetLastError UnmapViewOfFile MapViewOfFile CreateFileMappingW GetFileSize SetEvent ResetEvent WaitForSingleObjectEx CreateEventW lstrcmpiA LocalFree LocalAlloc HeapCreate GetProcAddress GetModuleHandleW InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent GetFullPathNameA GetFullPathNameW TlsFree TlsGetValue HeapDestroy TlsSetValue TlsAlloc Sleep CloseHandle ReadFile GetFileSizeEx GetLastError CreateFileW GetSystemInfo VirtualAlloc VirtualFree FreeLibrary WriteFile HeapFree GetProcessHeap HeapAlloc OutputDebugStringA LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection WideCharToMultiByte MultiByteToWideChar DisableThreadLibraryCalls LoadLibraryExW GetEnvironmentVariableA

advapi32

CryptDestroyHash RegEnumKeyExA CryptHashData CryptCreateHash CryptGetHashParam CryptReleaseContext RegCloseKey CryptAcquireContextW RegOpenKeyExW RegQueryValueExW RegQueryValueExA RegOpenKeyExA

api-ms-win-crt-time-l1-1-0

_time32

rpcrt4

UuidCreate

Sharing

General

Malware Config

Signatures

File Explorer

814b7b8c952a12d32592b8a4dd5dec70_NeikiAnalytics.exe

PE Signature issue

PE Signature issue

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

kernel32

advapi32

api-ms-win-crt-time-l1-1-0

rpcrt4

generic