43a8e553039634404f5032e027c79520_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

43a8e553039634404f5032e027c79520_NeikiAnalytics
Size

504KB
MD5

43a8e553039634404f5032e027c79520
SHA1

6cfa88356f0e67f1a8e86c50e3701fb746b095d0
SHA256

a56021257392d92083cd054d22706439544184167bdb66d5693c21e0b56bcc51
SHA512

4ce37cc6e8e50831ecf563163a1cb35fa6544caa60f561a66c129c8273fdfd11ba9cdd686baaac4ce83d04a56b0e88737ace355f3a1b5173dbfdfce647206448
SSDEEP

6144:jZXsjNMlbxOEMi3toWB/YaF35vrD8r680:j2jNSbxRn9oWBwaF35vPh80

Score

1^/10

Malware Config

Signatures

Files

43a8e553039634404f5032e027c79520_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09
Certificate

Issuer

CN=Test Root Certificate for Adobe,OU=Build Quality Assurance,O=Adobe Systes QA,L=San Jose,ST=California,C=US,1.2.840.113549.1.9.1=#0c12746c61626f756e744061646f62652e636f6d

Not Before

20/05/2009, 19:16

Not After

19/05/2014, 19:16

Subject

CN=Test Signing Certificate,OU=Build-Release Engineering,O=Adobe Systems QA,L=San Jose,ST=California,C=US,1.2.840.113549.1.9.1=#0c12746c61626f756e744061646f62652e636f6d

ff:c3:53:87:b5:2d:64:3a:58:cc:ae:10:8e:5d:74:e2:31:b4:1e:c1
Signer

Actual PE Digest

ff:c3:53:87:b5:2d:64:3a:58:cc:ae:10:8e:5d:74:e2:31:b4:1e:c1

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 337KB - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

09Certificate

ff:c3:53:87:b5:2d:64:3a:58:cc:ae:10:8e:5d:74:e2:31:b4:1e:c1Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 337KB - Virtual size: 336KB

.rdata Size: 94KB - Virtual size: 93KB

.data Size: 28KB - Virtual size: 30KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 38KB - Virtual size: 38KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

09
Certificate

ff:c3:53:87:b5:2d:64:3a:58:cc:ae:10:8e:5d:74:e2:31:b4:1e:c1
Signer

.text
Size: 337KB - Virtual size: 336KB

.rdata
Size: 94KB - Virtual size: 93KB

.data
Size: 28KB - Virtual size: 30KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 38KB - Virtual size: 38KB