12bb94dbda66eb9e22451d5456af78b0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

12bb94dbda66eb9e22451d5456af78b0_NeikiAnalytics
Size

177KB
MD5

12bb94dbda66eb9e22451d5456af78b0
SHA1

a8099b2d0505cd1b53d333fa67c3b84852f9d863
SHA256

7e505e7880a74d90365b6e17a02ae0d40b64915c39e3154cc9edb8f276d2a55b
SHA512

71bd6d1d8164678f6852a8b55dca1c37d99b50c07973e190fb93fbc8d91c834aa8e263757e9b70243935d6e05a761ec816d28647baa5bd8ab1b6c1f4c4e67132
SSDEEP

3072:4XYGqKe6kEqtYENTFsYz0UVUUAlTXRtnNzrepROMJwRuzTYZbQLmvhvst/Ao1BV7:uqKIr3TSRzrijqu1mvh0tp1O/LR7hKR

Score

1^/10

Malware Config

Signatures

Files

12bb94dbda66eb9e22451d5456af78b0_NeikiAnalytics
.dll windows:4 windows x64 arch:x64

Code Sign

33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/05/2023, 19:03

Not After

08/05/2024, 19:03

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

66:25:ee:79:39:b9:4b:5f:96:0e:6b:cf:3e:12:0f:2c:07:52:58:33:f4:d7:48:88:a7:1b:f9:c2:8b:f7:ed:b7
Signer

Actual PE Digest

66:25:ee:79:39:b9:4b:5f:96:0e:6b:cf:3e:12:0f:2c:07:52:58:33:f4:d7:48:88:a7:1b:f9:c2:8b:f7:ed:b7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Net.WebSockets.ni.pdb
D:\a\_work\1\s\artifacts\obj\System.Net.WebSockets\net6.0-windows-Release\System.Net.WebSockets.pdb

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7bCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

66:25:ee:79:39:b9:4b:5f:96:0e:6b:cf:3e:12:0f:2c:07:52:58:33:f4:d7:48:88:a7:1b:f9:c2:8b:f7:ed:b7Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 153KB - Virtual size: 152KB

.data Size: 13KB - Virtual size: 12KB

.reloc Size: 1024B - Virtual size: 788B

33:00:00:03:7b:a1:0a:3e:cb:66:e9:01:c0:00:00:00:00:03:7b
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

66:25:ee:79:39:b9:4b:5f:96:0e:6b:cf:3e:12:0f:2c:07:52:58:33:f4:d7:48:88:a7:1b:f9:c2:8b:f7:ed:b7
Signer

.text
Size: 153KB - Virtual size: 152KB

.data
Size: 13KB - Virtual size: 12KB

.reloc
Size: 1024B - Virtual size: 788B