81a067203a8dd8bc1befa2d72acf9010_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

81a067203a8dd8bc1befa2d72acf9010_NeikiAnalytics
Size

1.2MB
MD5

81a067203a8dd8bc1befa2d72acf9010
SHA1

e1a74685c1a3e96ec738c9273b14ba2764a70586
SHA256

7d7c3c6b748263f727f93de34003eb2c132d835ffb19c7c065895db23a2a9173
SHA512

7f4c0b1126e62debe6ab884545e728ec7726a5ff10145de73f66addacfded557aa04a566abdec793e1e7fb2896a50966d2da3cba63ca66a214c70284549a9b51
SSDEEP

24576:M+PUz4aQkMP9lUaMxChaj+oc20Rbn56gxdD/MAcj0DrPBGmyltaSH:HPcMPwTxzj+5Nb56grgj03Tylwi

Score

1^/10

Malware Config

Signatures

Files

81a067203a8dd8bc1befa2d72acf9010_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

ebc94d40d3318d36d01d017ecc46d1b0

Code Sign

05:be:e2:9e:d4:36:66:df:6e:ec:47:4e
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

02/10/2023, 09:55

Not After

02/10/2026, 09:55

Subject

SERIALNUMBER=308784725400483,CN=IP Klokov Alexey Rudolfovich,O=IP Klokov Alexey Rudolfovich,L=Saint Petersburg,ST=Saint Petersburg,C=RU,1.2.840.113549.1.9.1=#0c12616c6b6c6f6b6f764079616e6465782e7275,1.3.6.1.4.1.311.60.2.1.2=#13105361696e742050657465727362757267,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#130f427573696e65737320456e74697479

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

07/11/2023, 17:13

Not After

09/12/2034, 17:13

Subject

CN=Globalsign TSA for CodeSign1 - R6 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c1:3e:1d:c9:0e:93:7b:06:d3:09:6b:d0:0e:d7:db:ea:51:5d:1a:3b:7b:10:b8:c4:ab:7a:8c:6d:fb:2f:cf:e4
Signer

Actual PE Digest

c1:3e:1d:c9:0e:93:7b:06:d3:09:6b:d0:0e:d7:db:ea:51:5d:1a:3b:7b:10:b8:c4:ab:7a:8c:6d:fb:2f:cf:e4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gateservg

Transfer

kernel32

GetModuleHandleA
LoadLibraryA
VirtualProtect

msvbvm60

EVENT_SINK_GetIDsOfNames

Sections

.text
Size: - Virtual size: 992KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.grd0004
Size: 1.2MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebc94d40d3318d36d01d017ecc46d1b0

Code Sign

05:be:e2:9e:d4:36:66:df:6e:ec:47:4eCertificate

Extended Key Usages

Key Usages

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

c1:3e:1d:c9:0e:93:7b:06:d3:09:6b:d0:0e:d7:db:ea:51:5d:1a:3b:7b:10:b8:c4:ab:7a:8c:6d:fb:2f:cf:e4Signer

Headers

File Characteristics

Imports

gateservg

kernel32

msvbvm60

Sections

.text Size: - Virtual size: 992KB

.data Size: - Virtual size: 40KB

.rsrc Size: 4KB - Virtual size: 2KB

.grd0004 Size: 1.2MB - Virtual size: 1.1MB

.reloc Size: 4KB - Virtual size: 30B

05:be:e2:9e:d4:36:66:df:6e:ec:47:4e
Certificate

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

c1:3e:1d:c9:0e:93:7b:06:d3:09:6b:d0:0e:d7:db:ea:51:5d:1a:3b:7b:10:b8:c4:ab:7a:8c:6d:fb:2f:cf:e4
Signer

.text
Size: - Virtual size: 992KB

.data
Size: - Virtual size: 40KB

.rsrc
Size: 4KB - Virtual size: 2KB

.grd0004
Size: 1.2MB - Virtual size: 1.1MB

.reloc
Size: 4KB - Virtual size: 30B