16f0060fef080f733ef1fdcdda247e50_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

16f0060fef080f733ef1fdcdda247e50_NeikiAnalytics
Size

49KB
MD5

16f0060fef080f733ef1fdcdda247e50
SHA1

792b2eb37478c86f7585e3f667f2e21032064c64
SHA256

b3e6bfc8076cc5918f9bab117f9e02bf7b25e3d80abfa9bf3e07bacc2d7eec4b
SHA512

5f3efd55dc946e08e900a15d01e1481373c58e3c68c57586f58eed04e0ccecfee845d8e7cd48d174515d2429f56361e97b1bf210bdf20b4fb423dd4b77bef454
SSDEEP

1536:G9ONwaeY9bDe3ZllHgTlODRIasl0t7vr35:GsNwaeY9bDGZ7gQDRIXl+35

Score

1^/10

Malware Config

Signatures

Files

16f0060fef080f733ef1fdcdda247e50_NeikiAnalytics
.dll windows:5 windows x64 arch:x64

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e1:61:41:9c:0c:08:43:f7:f6:58:0c:91:a1:05:4e:30:63:8f:11:0a:07:20:77:f9:72:a3:87:cd:62:3b:7a:3d
Signer

Actual PE Digest

e1:61:41:9c:0c:08:43:f7:f6:58:0c:91:a1:05:4e:30:63:8f:11:0a:07:20:77:f9:72:a3:87:cd:62:3b:7a:3d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Net.Http.Json.ni.pdb
D:\workspace\_work\1\s\artifacts\obj\System.Net.Http.Json\net5.0-Release\System.Net.Http.Json.pdb

Sections

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

e1:61:41:9c:0c:08:43:f7:f6:58:0c:91:a1:05:4e:30:63:8f:11:0a:07:20:77:f9:72:a3:87:cd:62:3b:7a:3dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.data Size: 2KB - Virtual size: 2KB

.text Size: 37KB - Virtual size: 37KB

.reloc Size: 512B - Virtual size: 320B

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

e1:61:41:9c:0c:08:43:f7:f6:58:0c:91:a1:05:4e:30:63:8f:11:0a:07:20:77:f9:72:a3:87:cd:62:3b:7a:3d
Signer

.data
Size: 2KB - Virtual size: 2KB

.text
Size: 37KB - Virtual size: 37KB

.reloc
Size: 512B - Virtual size: 320B