96078b78f7adca1b395b53e1b52a75f0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
96078b78f7adca1b395b53e1b52a75f0_NeikiAnalytics.exe
Size 154KB
Sample240614-bj6khsygrf
SHA256 4442fe2be6f500735c28e3193fe2e0b5dbbb3b70eedbbbd289ed89db40f57869
MD5 96078b78f7adca1b395b53e1b52a75f0
SHA1 0ac1702e074319faa6dbdb0d0e37c4bde1b54ca1
SHA512 f91514f1629d6de8cfc14d65ae0daa7055ce5fbcfe5d37f204aff434c6de164767df5c910500a1a63f017231c36e9d82e5b9631631f3511e695d009f3530eafe
SSDEEP 3072:FWytrU+GIRzSZpxvsxj2Qtdi0OQ7giWhc/IXAoyBFM2Vq6Y2fkv8/zGV:FDtHOZnQtRIX56Y2ceze
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

96078b78f7adca1b395b53e1b52a75f0_NeikiAnalytics.exe

.dll 154KB

96078b78f7adca1b395b53e1b52a75f0_NeikiAnalytics.exe

IMPHASH 0b42ddaa7dbd124121cdb4b460061e99
SHA256 4442fe2be6f500735c28e3193fe2e0b5dbbb3b70eedbbbd289ed89db40f57869
MD5 96078b78f7adca1b395b53e1b52a75f0
SHA1 0ac1702e074319faa6dbdb0d0e37c4bde1b54ca1
SHA512 f91514f1629d6de8cfc14d65ae0daa7055ce5fbcfe5d37f204aff434c6de164767df5c910500a1a63f017231c36e9d82e5b9631631f3511e695d009f3530eafe
SSDEEP 3072:FWytrU+GIRzSZpxvsxj2Qtdi0OQ7giWhc/IXAoyBFM2Vq6Y2fkv8/zGV:FDtHOZnQtRIX56Y2ceze
MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest

b9:a3:7b:b0:67:8a:2a:c7:0a:2f:ba:bb:12:ac:ed:99:40:ae:c8:7a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Hendrik Leppkes,O=Hendrik Leppkes,POSTALCODE=22419,STREET=Wulffsblöcken 35,L=Hamburg,ST=Hamburg,C=DE

Chains

Nov 27, 2012

Minor OS version

Major OS version

Entry point

5184

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetProcAddress GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection LoadLibraryW QueryPerformanceCounter SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcrt

__dllonexit __setusermatherr _amsg_exit _errno _initterm _iob _lock _onexit _unlock abort calloc ceil fprintf free fwrite malloc memcpy memmove memset strlen strncmp vfprintf

avutil-lav-52

av_audio_fifo_alloc av_audio_fifo_drain av_audio_fifo_free av_audio_fifo_read av_audio_fifo_size av_audio_fifo_write av_default_item_name av_free av_freep av_get_bytes_per_sample av_get_channel_layout_nb_channels av_get_channel_layout_string av_get_cpu_flags av_get_packed_sample_fmt av_get_planar_sample_fmt av_get_sample_fmt_name av_log av_malloc av_mallocz av_opt_free av_opt_set_defaults av_reduce av_sample_fmt_is_planar av_samples_alloc av_samples_fill_arrays av_samples_get_buffer_size avpriv_snprintf

Name

.text

Size

91KB

Virtual Size

90KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rodata

Size

512B

Virtual Size

208B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

972B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1024B

Virtual Size

552B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

1024B

Virtual Size

848B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

1024B

Virtual Size

677B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

512B

Virtual Size

304B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

512B

Virtual Size

77B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/92

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

96078b78f7adca1b395b53e1b52a75f0_NeikiAnalytics.exe

PE Signature issue

kernel32

msvcrt

avutil-lav-52

generic