1ebdfc9620bd08105808d59cc890bbe5c9eb5c27d6167fc19a6fa50475ba6727_NeikiAnalytics[.]exe

General

Target
1ebdfc9620bd08105808d59cc890bbe5c9eb5c27d6167fc19a6fa50475ba6727_NeikiAnalytics.exe
Size 227KB
Sample240625-2xgresyfja
SHA256 1ebdfc9620bd08105808d59cc890bbe5c9eb5c27d6167fc19a6fa50475ba6727
MD5 31a0566dc46129543335b523e7336900
SHA1 dddeac01bd8afa707173d1a73e74707c766f16c6
SHA512 06111add34f7fa9e1fc566442abcb8069b8525ff1eebb6dc58f8c166e9189f5e18d3e22522908e91456a0dafe7db960b590f833368511cad657e2b4baa4fe162
SSDEEP 3072:IuU8KLcZklCWZh+ramRHtLgmYT3sgehMjbr/4G2XKQGb3VqnF23MXX:wDc6CWKrBHtLNCJehMDc8zVWF23M
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ebdfc9620bd08105808d59cc890bbe5c9eb5c27d6167fc19a6fa50475ba6727_NeikiAnalytics.exe

File Explorer

1ebdfc9620bd08105808d59cc890bbe5c9eb5c27d6167fc19a6fa50475ba6727_NeikiAnalytics.exe

.exe 227KB

1ebdfc9620bd08105808d59cc890bbe5c9eb5c27d6167fc19a6fa50475ba6727_NeikiAnalytics.exe

IMPHASH b58dbf8e9653bcfab6080872fca2c7d7
SHA256 1ebdfc9620bd08105808d59cc890bbe5c9eb5c27d6167fc19a6fa50475ba6727
MD5 31a0566dc46129543335b523e7336900
SHA1 dddeac01bd8afa707173d1a73e74707c766f16c6
SHA512 06111add34f7fa9e1fc566442abcb8069b8525ff1eebb6dc58f8c166e9189f5e18d3e22522908e91456a0dafe7db960b590f833368511cad657e2b4baa4fe162
SSDEEP 3072:IuU8KLcZklCWZh+ramRHtLgmYT3sgehMjbr/4G2XKQGb3VqnF23MXX:wDc6CWKrBHtLNCJehMDc8zVWF23M
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

13248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

InterlockedCompareExchange CreateHardLinkA GetSystemDefaultLCID GetTickCount GetWindowsDirectoryA EnumResourceTypesA GlobalFindAtomA LoadLibraryW GetConsoleAliasW IsBadWritePtr IsBadStringPtrA SetLastError GetProcAddress SetFileAttributesA GetDiskFreeSpaceW OpenJobObjectA LocalAlloc FindFirstVolumeMountPointW GetNumberFormatW GlobalHandle GetOEMCP FindFirstVolumeMountPointA LoadLibraryExA OpenFileMappingA CommConfigDialogW SetStdHandle WriteConsoleW FindResourceA TlsGetValue GetComputerNameA LoadLibraryA GetSystemDefaultLangID MultiByteToWideChar DecodePointer EncodePointer GetLastError HeapReAlloc GetModuleHandleW ExitProcess GetCommandLineA HeapSetInformation GetStartupInfoW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess GetCPInfo InterlockedIncrement InterlockedDecrement GetACP IsValidCodePage TlsAlloc TlsSetValue TlsFree GetCurrentThreadId IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection HeapCreate HeapFree HeapAlloc WriteFile GetModuleFileNameW GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep LCMapStringW GetStringTypeW RtlUnwind HeapSize RaiseException GetConsoleCP GetConsoleMode FlushFileBuffers SetFilePointer CloseHandle CreateFileW

user32

DdeCmpStringHandles GetCaretPos CloseWindow GetKeyboardLayoutNameA GetWindowTextLengthA

gdi32

GetCharacterPlacementA

advapi32

ClearEventLogA BackupEventLogW

Sharing