b3219a26698ad2826dcb475dd47efc5e018191c1abec6e10b6469c7a04749de4_NeikiAnalytics[.]exe

General

Target
b3219a26698ad2826dcb475dd47efc5e018191c1abec6e10b6469c7a04749de4_NeikiAnalytics.exe
Size 10.0MB
Sample240629-tx6fsa1dme
SHA256 b3219a26698ad2826dcb475dd47efc5e018191c1abec6e10b6469c7a04749de4
MD5 ef7867eb7e9b5be895b1978d2c388fa0
SHA1 665f43533d1fb49da13d7919e34aa5f60987f638
SHA512 a5525d28ef1a99d4ca798f132b120850e7a9293e11df84fcc814ae4413edfcf70631aac556df57927ee82ee24f99da3a7f77a06cc516835d20a7231f2d5b6203
SSDEEP 196608:oaBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBX:9BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3219a26698ad2826dcb475dd47efc5e018191c1abec6e10b6469c7a04749de4_NeikiAnalytics.exe

File Explorer

b3219a26698ad2826dcb475dd47efc5e018191c1abec6e10b6469c7a04749de4_NeikiAnalytics.exe

.exe 10.0MB

b3219a26698ad2826dcb475dd47efc5e018191c1abec6e10b6469c7a04749de4_NeikiAnalytics.exe

IMPHASH 21bb6d66b5d6d28ae8c3bacf2985bb75
SHA256 b3219a26698ad2826dcb475dd47efc5e018191c1abec6e10b6469c7a04749de4
MD5 ef7867eb7e9b5be895b1978d2c388fa0
SHA1 665f43533d1fb49da13d7919e34aa5f60987f638
SHA512 a5525d28ef1a99d4ca798f132b120850e7a9293e11df84fcc814ae4413edfcf70631aac556df57927ee82ee24f99da3a7f77a06cc516835d20a7231f2d5b6203
SSDEEP 196608:oaBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBX:9BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12052

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

PeekNamedPipe TlsGetValue LoadLibraryExW InterlockedCompareExchange SetComputerNameW GetTickCount GetUserDefaultLangID GlobalAlloc LoadLibraryW lstrcatA GetACP IsBadStringPtrA GetLastError SetLastError GetProcAddress SetComputerNameA GetDiskFreeSpaceW LoadLibraryA SetConsoleCtrlHandler FoldStringW GetModuleFileNameA FindFirstVolumeMountPointA BuildCommDCBA OutputDebugStringA TerminateJobObject GetWindowsDirectoryW WriteProcessMemory HeapFree EncodePointer DecodePointer HeapReAlloc GetCommandLineA HeapSetInformation GetStartupInfoW HeapCreate WriteFile WideCharToMultiByte GetConsoleCP GetConsoleMode FlushFileBuffers InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection Sleep HeapSize GetModuleHandleW ExitProcess TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement HeapAlloc SetUnhandledExceptionFilter GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter IsDebuggerPresent TerminateProcess GetCurrentProcess WriteConsoleW MultiByteToWideChar SetFilePointer SetStdHandle RtlUnwind GetCPInfo GetOEMCP IsValidCodePage CreateFileW CloseHandle GetStringTypeW LCMapStringW IsProcessorFeaturePresent

Sharing