641a8a6c70091a9fb1a88b331fd33c90_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

641a8a6c70091a9fb1a88b331fd33c90_NeikiAnalytics
Size

2.8MB
MD5

641a8a6c70091a9fb1a88b331fd33c90
SHA1

b4e7f7e8b6892a41c7e9da3cb8af439452615c69
SHA256

3d1922680f49bc095c78ed8d029e9ae38a86f3f7ed100d0d80acef3b263d95a9
SHA512

18b6d5a0af58b7ff0e16437222202a51736e37b600a7410e9f2500521a2d1b3f357ea8c74adbb372340885bf9431fe724fbeeca1f8a1b52de1a3dae807a83f4d
SSDEEP

49152:xSL5iTFPAJ8WW2vctcRBteLBIDcgX87yF86xiqkf6sBQdpNaqmo:xYwRh+Utc0IoU2kxI6OwWo

Score

1^/10

Malware Config

Signatures

Files

641a8a6c70091a9fb1a88b331fd33c90_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Code Sign

7b:fc:68:05:37:64:77:af:41:61:13:51:ef:a8:a3:50
Certificate

Issuer

CN=IndusSinks Software Group

Not Before

06/02/2023, 08:00

Not After

06/02/2024, 08:00

Subject

CN=IndusSinks Software Group

a1:31:53:0d:7a:f2:87:c6:0b:9e:33:af:d7:1e:ab:80:32:de:03:45:77:cb:e8:4d:35:30:ab:65:68:f2:7e:da
Signer

Actual PE Digest

a1:31:53:0d:7a:f2:87:c6:0b:9e:33:af:d7:1e:ab:80:32:de:03:45:77:cb:e8:4d:35:30:ab:65:68:f2:7e:da

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 1.8MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 18KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 290KB - Virtual size: 824KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 223KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 69KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

7b:fc:68:05:37:64:77:af:41:61:13:51:ef:a8:a3:50Certificate

a1:31:53:0d:7a:f2:87:c6:0b:9e:33:af:d7:1e:ab:80:32:de:03:45:77:cb:e8:4d:35:30:ab:65:68:f2:7e:daSigner

Headers

DLL Characteristics

File Characteristics

Sections

Size: 1.8MB - Virtual size: 9.1MB

Size: 5KB - Virtual size: 16KB

Size: 18KB - Virtual size: 48KB

Size: 290KB - Virtual size: 824KB

Size: 5KB - Virtual size: 64KB

Size: 1KB - Virtual size: 280KB

.rsrc Size: 223KB - Virtual size: 1.4MB

Size: 69KB - Virtual size: 160KB

.qtmetad Size: 404KB - Virtual size: 404KB

.adata Size: - Virtual size: 4KB

7b:fc:68:05:37:64:77:af:41:61:13:51:ef:a8:a3:50
Certificate

a1:31:53:0d:7a:f2:87:c6:0b:9e:33:af:d7:1e:ab:80:32:de:03:45:77:cb:e8:4d:35:30:ab:65:68:f2:7e:da
Signer

.rsrc
Size: 223KB - Virtual size: 1.4MB

.qtmetad
Size: 404KB - Virtual size: 404KB

.adata
Size: - Virtual size: 4KB