67aa0099161516f2bb28f7d5ce6126742a140af6fa6feca5693e2114c4599c93_NeikiAnalytics[.]exe

General

Target
67aa0099161516f2bb28f7d5ce6126742a140af6fa6feca5693e2114c4599c93_NeikiAnalytics.exe
Size 437KB
Sample240623-nph3mashrr
SHA256 67aa0099161516f2bb28f7d5ce6126742a140af6fa6feca5693e2114c4599c93
MD5 a34ba49a94044c74b35f0a0954080b60
SHA1 ee751ed54482862880df3f6c569a8424ebc379b5
SHA512 acfcd598367b0a2018877dbb670cb2b4cd1d1a44f923d111344ccf589387bd7812d45bc9f91405c45b4046b622f16ee6e82e38e881cf210896cb6a5db753270f
SSDEEP 12288:emq4+yM7kG6U+t9Cp8IZsfbqWySGnHzCy71aQlnZx3Q:U7k3U+Os+WDG7LnZp
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67aa0099161516f2bb28f7d5ce6126742a140af6fa6feca5693e2114c4599c93_NeikiAnalytics.exe

File Explorer

67aa0099161516f2bb28f7d5ce6126742a140af6fa6feca5693e2114c4599c93_NeikiAnalytics.exe

.exe 437KB

67aa0099161516f2bb28f7d5ce6126742a140af6fa6feca5693e2114c4599c93_NeikiAnalytics.exe

IMPHASH e7ae2117bab3f618898e7d7852cfc24b
SHA256 67aa0099161516f2bb28f7d5ce6126742a140af6fa6feca5693e2114c4599c93
MD5 a34ba49a94044c74b35f0a0954080b60
SHA1 ee751ed54482862880df3f6c569a8424ebc379b5
SHA512 acfcd598367b0a2018877dbb670cb2b4cd1d1a44f923d111344ccf589387bd7812d45bc9f91405c45b4046b622f16ee6e82e38e881cf210896cb6a5db753270f
SSDEEP 12288:emq4+yM7kG6U+t9Cp8IZsfbqWySGnHzCy71aQlnZx3Q:U7k3U+Os+WDG7LnZp
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

60231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

DestroyWindow

advapi32

GetNumberOfEventLogRecords DeleteAce

kernel32

WriteConsoleW GetProcessHeap CreateFileW HeapSize CloseHandle WaitForSingleObject CreateThread VirtualAlloc WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread WideCharToMultiByte MultiByteToWideChar GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter ReleaseSRWLockExclusive WakeAllConditionVariable EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetCPInfo IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW SetStdHandle RaiseException RtlUnwind GetLastError SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitThread FreeLibraryAndExitThread GetModuleHandleExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess HeapAlloc HeapFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW

Sharing