9f687e52ac47b3d6a51d43b833348400_NeikiAnalytics[.]exe

General

Target
9f687e52ac47b3d6a51d43b833348400_NeikiAnalytics.exe
Size 159KB
Sample240614-d8zvdatfnc
SHA256 436846c3db0247c2dc898bbdff318cde6d206733d9e3004f9c1abadba1afb3c3
MD5 9f687e52ac47b3d6a51d43b833348400
SHA1 5dfd3b8930edb72d875d4e8e2cd9cc1f8ffa628c
SHA512 50aec71b5d94d977bff132ae017f2734e2fa7f5d8fb6c3792189ce370e274274446b28cb9a409de35e73fbe5db6ced75ab0a63affd9f0d2686d77e8473ae2243
SSDEEP 3072:Z5dnu0W5ZyYi+KpM6TWkrtGGF4v+QLfDP/CEINkt0xFgYNz6Y:5nxIZhKp1jFX4D8gO6Y
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f687e52ac47b3d6a51d43b833348400_NeikiAnalytics.exe

File Explorer

9f687e52ac47b3d6a51d43b833348400_NeikiAnalytics.exe

.exe 159KB

9f687e52ac47b3d6a51d43b833348400_NeikiAnalytics.exe

IMPHASH 4b7cf5131d2e296be23f3a22ab9adc11
SHA256 436846c3db0247c2dc898bbdff318cde6d206733d9e3004f9c1abadba1afb3c3
MD5 9f687e52ac47b3d6a51d43b833348400
SHA1 5dfd3b8930edb72d875d4e8e2cd9cc1f8ffa628c
SHA512 50aec71b5d94d977bff132ae017f2734e2fa7f5d8fb6c3792189ce370e274274446b28cb9a409de35e73fbe5db6ced75ab0a63affd9f0d2686d77e8473ae2243
SSDEEP 3072:Z5dnu0W5ZyYi+KpM6TWkrtGGF4v+QLfDP/CEINkt0xFgYNz6Y:5nxIZhKp1jFX4D8gO6Y
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

75841

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP IMAGE_FILE_NET_RUN_FROM_SWAP

PDB paths

ose.pdb

msvcrt

_controlfp _onexit __dllonexit _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _amsg_exit _acmdln exit _cexit _ismbblead _XcptFilter _exit _c_exit _vsnwprintf _vsnprintf wcsrchr wcscmp

advapi32

RegEnumValueW CryptReleaseContext CryptAcquireContextW SetFileSecurityW RegDeleteKeyW OpenThreadToken CheckTokenMembership ConvertStringSecurityDescriptorToSecurityDescriptorW LookupAccountNameW AllocateAndInitializeSid FreeSid CryptHashData CryptGetHashParam CryptCreateHash CryptDestroyHash RegisterServiceCtrlHandlerW RegCloseKey RegEnumKeyExW RegCreateKeyExW RegOpenKeyExW RegSetValueExW SetThreadToken RegQueryValueExW RegNotifyChangeKeyValue SetServiceStatus StartServiceCtrlDispatcherW DuplicateToken RegDeleteValueW

kernel32

FormatMessageA GetComputerNameW GetModuleHandleA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter QueryPerformanceCounter GetCurrentThreadId GetCurrentProcessId HeapAlloc GetProcessHeap HeapReAlloc HeapFree HeapSize RaiseException LoadLibraryA MoveFileExW GetLastError GetModuleFileNameW CloseHandle SetEvent InterlockedIncrement InterlockedDecrement lstrlenW GetDriveTypeW GetLogicalDrives lstrcmpW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection Sleep ExitProcess InitializeCriticalSection GetCommandLineW GetTickCount ReleaseMutex ResetEvent WaitForMultipleObjectsEx SetErrorMode CreateEventW CreateMutexW CreateProcessW GetSystemInfo InterlockedExchange CreateFileA ReadFile SetFilePointer DosDateTimeToFileTime MultiByteToWideChar FreeLibrary GetProcAddress LoadLibraryW WideCharToMultiByte CreateFileW ReleaseSemaphore WaitForSingleObject WaitForMultipleObjects CreateThread CreateSemaphoreW VirtualFree VirtualAlloc SetFilePointerEx GetSystemTimeAsFileTime SystemTimeToFileTime GetSystemTime SetFileTime SetEndOfFile WriteFile GlobalFree GlobalAlloc GetFileAttributesExW GetFileSizeEx FindClose FindFirstFileW GetFileAttributesW CopyFileW CreateHardLinkW SetFileAttributesW DeleteFileW GetTempPathA GetTempPathW GetFileTime FindNextFileW LocalFree GetCurrentThread CreateDirectoryW RemoveDirectoryW lstrlenA SystemTimeToTzSpecificLocalTime GetTimeZoneInformation LocalAlloc

rpcrt4

RpcImpersonateClient RpcRevertToSelf RpcServerUnregisterIf RpcServerUseProtseqEpW RpcServerRegisterIfEx NdrServerCall2

Sharing