ac76c1d0b31a8a3f61607cf317cc5270_NEIKI

Sharing

Copy URL Twitter E-mail

General

Target

ac76c1d0b31a8a3f61607cf317cc5270_NEIKI
Size

5.2MB
MD5

ac76c1d0b31a8a3f61607cf317cc5270
SHA1

66723b163ee2ecfd2e6279076261b26ff9617121
SHA256

0778cdd0a1301956778108dcbf6a59a4075a04147a76b0beea289bd741b99303
SHA512

6700322266753f4ca5cb9a43058556615c9ba86265a5ecba1dfcd05a0d85f3f6bd71a69431b9a995b72471b9921b4029c0227aa0f832afab3a1700d6b1d607db
SSDEEP

98304:K2yUDEVO0IKyqyMDJAmHt1uppOMeUcMy+Zuj3Q3DVSIIzYViMumjXNn6J:vyUAICyMDJbbup+My+ZqQB/8

Score

1^/10

Malware Config

Signatures

Files

ac76c1d0b31a8a3f61607cf317cc5270_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

53:18:9d:12:35:a3:28:e7
Certificate

Issuer

CN=Артём,C=RU,1.2.840.113549.1.9.1=#0c12647364667765667740676d61696c2e636f6d

Not Before

14/11/2023, 00:00

Not After

14/11/2033, 00:00

Subject

CN=Артём,C=RU,1.2.840.113549.1.9.1=#0c12647364667765667740676d61696c2e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

18:a7:7c:8b:a0:aa:08:63:9c:9e:77:08:c8:ed:d0:b5:11:8b:35:e9
Signer

Actual PE Digest

18:a7:7c:8b:a0:aa:08:63:9c:9e:77:08:c8:ed:d0:b5:11:8b:35:e9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

53:18:9d:12:35:a3:28:e7Certificate

Extended Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

18:a7:7c:8b:a0:aa:08:63:9c:9e:77:08:c8:ed:d0:b5:11:8b:35:e9Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5.1MB - Virtual size: 5.1MB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 512B - Virtual size: 12B

53:18:9d:12:35:a3:28:e7
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

18:a7:7c:8b:a0:aa:08:63:9c:9e:77:08:c8:ed:d0:b5:11:8b:35:e9
Signer

.text
Size: 5.1MB - Virtual size: 5.1MB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 512B - Virtual size: 12B