4121f49259adce0401501e7afe372cb729b1870e655261540dcef4232b4dd07f_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
4121f49259adce0401501e7afe372cb729b1870e655261540dcef4232b4dd07f_NeikiAnalytics.exe
Size 719KB
Sample240701-jp4bcazejd
SHA256 4121f49259adce0401501e7afe372cb729b1870e655261540dcef4232b4dd07f
MD5 c1a3337afb27ed2646b79091729251f0
SHA1 88c7254022e28dba23685f6c31cda79eb133c7fe
SHA512 3cf3d3d02e214f91c336769070aabe35cced9e932c76f0ef50b41f9998d4b6b6b62f4c5bcff3cf5e2f31b5020d0656b9ea07e0c8a99d4be9e4bd173b0ed29929
SSDEEP 12288:eJ80FdJWXadx2rlbXgp7yTVwjPScS2MsfJ3ZFs2Rc:eJ8+MKd8dXfTuVSz8Vlc
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4121f49259adce0401501e7afe372cb729b1870e655261540dcef4232b4dd07f_NeikiAnalytics.exe

File Explorer

4121f49259adce0401501e7afe372cb729b1870e655261540dcef4232b4dd07f_NeikiAnalytics.exe

.exe 719KB

4121f49259adce0401501e7afe372cb729b1870e655261540dcef4232b4dd07f_NeikiAnalytics.exe

IMPHASH 839171cbe0816f0edaad2a1419966c78
SHA256 4121f49259adce0401501e7afe372cb729b1870e655261540dcef4232b4dd07f
MD5 c1a3337afb27ed2646b79091729251f0
SHA1 88c7254022e28dba23685f6c31cda79eb133c7fe
SHA512 3cf3d3d02e214f91c336769070aabe35cced9e932c76f0ef50b41f9998d4b6b6b62f4c5bcff3cf5e2f31b5020d0656b9ea07e0c8a99d4be9e4bd173b0ed29929
SSDEEP 12288:eJ80FdJWXadx2rlbXgp7yTVwjPScS2MsfJ3ZFs2Rc:eJ8+MKd8dXfTuVSz8Vlc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4208

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42u

ord5303 ord5285 ord5710 ord2977 ord3142 ord3254 ord4459 ord3131 ord3257 ord2980 ord3076 ord2971 ord3825 ord3826 ord3820 ord3074 ord4075 ord4616 ord4418 ord3733 ord561 ord825 ord815 ord641 ord800 ord2506 ord2613 ord1131 ord823 ord665 ord1971 ord3313 ord5180 ord354 ord5261 ord4370 ord4847 ord4992 ord4704 ord4692 ord4073 ord1767 ord4401 ord5237 ord2377 ord5157 ord6370 ord4347 ord5276 ord3793 ord4831 ord4435 ord2640 ord2047 ord6372 ord3744 ord5059 ord1720 ord5257 ord2438 ord2116 ord5273 ord4621 ord4419 ord3592 ord324 ord4229 ord1143 ord1165 ord861 ord540 ord2362 ord4155 ord2858 ord2371 ord755 ord470 ord6330 ord860 ord4074 ord2717 ord5298 ord5296 ord3341 ord2388 ord5193 ord1089 ord3917 ord5727 ord2504 ord2546 ord4480 ord6371 ord4269 ord6048 ord4667

msvcrt

__CxxFrameHandler fclose _onexit __dllonexit

kernel32

GetEnvironmentStringsW SetCurrentDirectoryA GetProcAddress GetOverlappedResult GetStartupInfoA GetCommandLineA GetModuleFileNameW CreateFileW CreateFileA SetCommBreak GetLastError GetStringTypeA GetCurrentProcess WideCharToMultiByte

user32

SetFocus HideCaret DialogBoxParamW DispatchMessageW InsertMenuA ReleaseDC GetCursorPos PostQuitMessage IsIconic GetSystemMetrics GetClientRect DrawIcon GetSystemMenu AppendMenuW SendMessageW LoadIconW EnableWindow MessageBoxW

gdi32

GetTextExtentExPointA

msvcp60

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ ??_8?$basic_ifstream@DU?$char_traits@D@std@@@std@@7B@ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0locale@std@@QAE@XZ ??_7?$basic_ifstream@DU?$char_traits@D@std@@@std@@6B@ ??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z ??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ ??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ ??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@ ??0ios_base@std@@IAE@XZ ??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@ ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@ ?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z ??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z ??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@ ?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z ?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z ?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z ?clear@ios_base@std@@QAEXH_N@Z ??_7?$basic_filebuf@DU?$char_traits@D@std@@@std@@6B@ ??0Init@ios_base@std@@QAE@XZ ??1Init@ios_base@std@@QAE@XZ ??0_Winit@std@@QAE@XZ ??1_Winit@std@@QAE@XZ ??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ ??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ??1ios_base@std@@UAE@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??1locale@std@@QAE@XZ ?close@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@XZ