512f27386ed3d90edd655014218050b0_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

512f27386ed3d90edd655014218050b0_NeikiAnalytics
Size

49KB
MD5

512f27386ed3d90edd655014218050b0
SHA1

82549e27d49217e2cc85d23f163be162ab276b07
SHA256

4fc2bd4fad2a94262d4cc6198ec885fd4557a1ecda3b22209cd8af1b98c3cf46
SHA512

e4826bbdaa54481da02ea9f95f8240b67dfc1166b944b21d8f66643743ba69f04a986c8530fa14f161060273e6c368e0e75ce02947287f71b5efee842c1bacfa
SSDEEP

384:N7ebQrWciDwWImDw0DBRJcEn6R9zuCls:5RQHDw01Ptn29zB

Score

1^/10

Malware Config

Signatures

Files

512f27386ed3d90edd655014218050b0_NeikiAnalytics
.sys windows:10 windows x64 arch:x64

1b6ad7bb25f967b332f37fb249a4868e

Code Sign

33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16-11-2023 19:20

Not After

14-11-2024 19:20

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19-10-2011 18:41

Not After

19-10-2026 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:64:7a:94:d1:3f:46:49:07:10:48:d8:13:23:5a:10:22:ca:61:31:dd:c6:c2:8f:f2:fd:74:66:a9:26:8a:89
Signer

Actual PE Digest

27:64:7a:94:d1:3f:46:49:07:10:48:d8:13:23:5a:10:22:ca:61:31:dd:c6:c2:8f:f2:fd:74:66:a9:26:8a:89

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

DrmkAud.pdb

Imports

ks.sys

KsInitializeDriver

drmk.sys

DrmGetFilterDescriptor

Sections

.text
Size: 4KB - Virtual size: 166B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 208B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

GFIDS
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b6ad7bb25f967b332f37fb249a4868e

Code Sign

33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60Certificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

27:64:7a:94:d1:3f:46:49:07:10:48:d8:13:23:5a:10:22:ca:61:31:dd:c6:c2:8f:f2:fd:74:66:a9:26:8a:89Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ks.sys

drmk.sys

Sections

.text Size: 4KB - Virtual size: 166B

.rdata Size: 4KB - Virtual size: 984B

.data Size: 4KB - Virtual size: 192B

.pdata Size: 4KB - Virtual size: 96B

.idata Size: 4KB - Virtual size: 242B

INIT Size: 4KB - Virtual size: 208B

GFIDS Size: 4KB - Virtual size: 12B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 108B

33:00:00:04:60:cf:42:a9:12:31:5f:6f:b3:00:00:00:00:04:60
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

27:64:7a:94:d1:3f:46:49:07:10:48:d8:13:23:5a:10:22:ca:61:31:dd:c6:c2:8f:f2:fd:74:66:a9:26:8a:89
Signer

.text
Size: 4KB - Virtual size: 166B

.rdata
Size: 4KB - Virtual size: 984B

.data
Size: 4KB - Virtual size: 192B

.pdata
Size: 4KB - Virtual size: 96B

.idata
Size: 4KB - Virtual size: 242B

INIT
Size: 4KB - Virtual size: 208B

GFIDS
Size: 4KB - Virtual size: 12B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 108B