8262f7b42a93e532b8a9445fe1c6bc30_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
8262f7b42a93e532b8a9445fe1c6bc30_NeikiAnalytics.exe
Size 665KB
Sample240613-rdv5lawdrm
SHA256 e0cca1f09a5c207cee7388e25d3e3670f42c9c56f3af4667b4e400bf26ced43b
MD5 8262f7b42a93e532b8a9445fe1c6bc30
SHA1 0f28ba852558b3974920d306b1b12c3101e2efc0
SHA512 678e0d71d3d7a84ffbf29d8c631c0614493aa475b00bc40c1df56ac12afba1729bc3ddd573bcc5653bc523c5270428dcc94c52297de43d3649084d30b1dd7238
SSDEEP 12288:3/nUHbC/V7QTduSZpUdxB30GHrVxGnXQSaWt+DNISOgv3isiyWcL:3s7CuTduSZpUR0GHrVQ1aW4mSOgv3isi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8262f7b42a93e532b8a9445fe1c6bc30_NeikiAnalytics.exe

File Explorer

8262f7b42a93e532b8a9445fe1c6bc30_NeikiAnalytics.exe

.exe 665KB

8262f7b42a93e532b8a9445fe1c6bc30_NeikiAnalytics.exe

IMPHASH 98b970a4faa71eb525df263f04d92691
SHA256 e0cca1f09a5c207cee7388e25d3e3670f42c9c56f3af4667b4e400bf26ced43b
MD5 8262f7b42a93e532b8a9445fe1c6bc30
SHA1 0f28ba852558b3974920d306b1b12c3101e2efc0
SHA512 678e0d71d3d7a84ffbf29d8c631c0614493aa475b00bc40c1df56ac12afba1729bc3ddd573bcc5653bc523c5270428dcc94c52297de43d3649084d30b1dd7238
SSDEEP 12288:3/nUHbC/V7QTduSZpUdxB30GHrVxGnXQSaWt+DNISOgv3isiyWcL:3s7CuTduSZpUR0GHrVQ1aW4mSOgv3isi
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

88258

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

t:\misc\x86\ship\0\dssm.pdb

kernel32

SetFileAttributesW GetFileAttributesW CopyFileW GetFileAttributesExW CreateEventW SystemTimeToFileTime FindFirstFileW CreateDirectoryW GetSystemTimeAsFileTime MoveFileExW GetFullPathNameW RemoveDirectoryW ReadFile SetFilePointer WriteFile GetTempFileNameW DeleteFileW FindNextFileW GetDriveTypeW MapViewOfFile CreateFileMappingA SetLastError GlobalFree GlobalAlloc GetQueuedCompletionStatus CreateIoCompletionPort ResetEvent GetModuleHandleW WaitForSingleObject GetCurrentThreadId GetExitCodeThread CreateThread CloseHandle GetLastError UnmapViewOfFile FindClose RaiseException FileTimeToSystemTime GetTempPathW SetEvent LocalAlloc IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetStartupInfoA InterlockedCompareExchange Sleep InterlockedExchange HeapAlloc HeapFree GetTempPathA GetTempFileNameA CreateProcessA GetProcessHeap GetCurrentProcessId GetTickCount QueryPerformanceCounter VirtualProtect FreeLibrary GetSystemDirectoryW LoadLibraryExW LoadLibraryW GetProcAddress LoadLibraryA

user32

PeekMessageW PostThreadMessageW DispatchMessageW MsgWaitForMultipleObjects TranslateMessage

advapi32

DecryptFileW RegCloseKey RegQueryValueExW RegOpenKeyExW RegQueryValueExA RegOpenKeyExA EncryptFileW

ole32

CoTaskMemAlloc CreateClassMoniker CoDisconnectObject CoRevokeClassObject CoReleaseServerProcess StringFromGUID2 CoAddRefServerProcess CoTaskMemFree CoCreateInstance CoUninitialize CoInitialize CreateStreamOnHGlobal CoRegisterMessageFilter CoResumeClassObjects CoRegisterClassObject CLSIDFromString GetRunningObjectTable

rpcrt4

UuidCreate

iphlpapi

NotifyRouteChange

shlwapi

wnsprintfW

msvcr80

fclose fwprintf_s fopen_s _amsg_exit __getmainargs _cexit _exit _XcptFilter _ismbblead exit _acmdln _initterm _initterm_e _configthreadlocale __setusermatherr _adjust_fdiv __p__commode __p__fmode _encode_pointer __set_app_type _except_handler4_common _crt_debugger_hook _unlock __dllonexit _lock _onexit _decode_pointer _invoke_watson _controlfp_s ?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QAEXXZ wcscpy_s vswprintf_s wcsrchr memmove memset memcpy vsprintf_s