bb178b3809aa2825c42a03b3e350ee40_NeikiAnalytics[.]exe

General

Target
bb178b3809aa2825c42a03b3e350ee40_NeikiAnalytics.exe
Size 1.9MB
Sample240619-n83ldavark
SHA256 e6d0b85d153a17dfb760d300110537ecf5dc04d9d07b915cbc3bffb8cd682451
MD5 bb178b3809aa2825c42a03b3e350ee40
SHA1 384d12daf6c48d37aace56ddcc06d1bc57105a82
SHA512 3a0d3e53d94ee0853d2b9b1dcfa6575f2f92200c84b6a2ce7b6bfd9b6e4e02b7f148fb25b28697443cff83e2c3e5e2738b44f399aee57662d9de8fc6a113df81
SSDEEP 49152:Cuum1rFj6I2O04hbivi9UGNyDMq7bJc4sy8sDibsSe/Y//:CuVrp6TwOviCayDMp4syPr0/
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb178b3809aa2825c42a03b3e350ee40_NeikiAnalytics.exe

File Explorer

bb178b3809aa2825c42a03b3e350ee40_NeikiAnalytics.exe

.exe 1.9MB

bb178b3809aa2825c42a03b3e350ee40_NeikiAnalytics.exe

IMPHASH 1626c608a2c2c6430c3771205605fe5e
SHA256 e6d0b85d153a17dfb760d300110537ecf5dc04d9d07b915cbc3bffb8cd682451
MD5 bb178b3809aa2825c42a03b3e350ee40
SHA1 384d12daf6c48d37aace56ddcc06d1bc57105a82
SHA512 3a0d3e53d94ee0853d2b9b1dcfa6575f2f92200c84b6a2ce7b6bfd9b6e4e02b7f148fb25b28697443cff83e2c3e5e2738b44f399aee57662d9de8fc6a113df81
SSDEEP 49152:Cuum1rFj6I2O04hbivi9UGNyDMq7bJc4sy8sDibsSe/Y//:CuVrp6TwOviCayDMp4syPr0/
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

98014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessHeap EnterCriticalSection Sleep GetFileSize CloseHandle UnmapViewOfFile LoadLibraryA GetModuleHandleA InterlockedIncrement InterlockedDecrement GetProcAddress VirtualFree GetLastError GetModuleHandleExW IsBadReadPtr GetFullPathNameW GetFileAttributesExW SetLastError HeapFree DeleteFileA ExitProcess TerminateProcess SetUnhandledExceptionFilter GetProcessId WaitForSingleObject GetLocalTime SystemTimeToFileTime GetTickCount CreateProcessW GetTempPathA GetTempFileNameA MoveFileExA AddVectoredExceptionHandler GetCurrentProcessId GetCurrentThread GetThreadContext CreateDirectoryA RemoveDirectoryA GetFileAttributesA MultiByteToWideChar WideCharToMultiByte CreateFileW WriteConsoleW HeapAlloc FreeLibrary WriteFile InterlockedCompareExchange FlushFileBuffers LeaveCriticalSection DeleteCriticalSection RaiseException RtlUnwind GetCommandLineA InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter GetCurrentProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetStdHandle GetModuleFileNameW IsProcessorFeaturePresent HeapSize IsDebuggerPresent GetCurrentThreadId VirtualQuery IsValidCodePage GetACP GetOEMCP GetCPInfo GetConsoleMode SetFilePointerEx GetFileType GetModuleFileNameA QueryPerformanceCounter GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW OutputDebugStringW LoadLibraryExW LoadLibraryW LCMapStringW HeapReAlloc GetConsoleCP GetStringTypeW SetStdHandle

user32

MessageBoxA

advapi32

RegOpenKeyExA RegCloseKey RegQueryValueExA

shell32

ShellExecuteExW

Sharing