9709204994887d48ffe4b1e579458280_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

9709204994887d48ffe4b1e579458280_NeikiAnalytics
Size

431KB
MD5

9709204994887d48ffe4b1e579458280
SHA1

d800af2d3a2738925124251b583e0fbcfebddea4
SHA256

1b9747604efa0e38a2cf2e40e45cf820540cfd607ef7974376dbe16db1e8ea0f
SHA512

b80ca453e5215601bd9505d50c7511d7636108c1b827d1b8b5e1fd00d946bc6fc622acbd56debfb9413c695e7a4577faf23b67a0248710b57ac0b6fa95235b2c
SSDEEP

6144:oN5VWhmXLfYm6p5xcWSml9eJF7nmY2JbbNR/9lZe59PL0tLPNyBu:oFeiK5xx+F7nYf/DEL0yBu

Score

1^/10

Malware Config

Signatures

Files

9709204994887d48ffe4b1e579458280_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11-08-2017 20:20

Not After

11-08-2018 20:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

53:fd:43:ff:f4:c6:bb:89:fc:00:0c:79:76:9f:f9:52:27:ba:9b:73:43:16:99:6b:a6:e7:0d:90:1a:25:d9:bc
Signer

Actual PE Digest

53:fd:43:ff:f4:c6:bb:89:fc:00:0c:79:76:9f:f9:52:27:ba:9b:73:43:16:99:6b:a6:e7:0d:90:1a:25:d9:bc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Net.Sockets.ni.pdb
E:\A\_work\2872\s\corefx\bin\obj\Windows_NT.AnyCPU.Release\System.Net.Sockets\netcoreapp\System.Net.Sockets.pdb

Sections

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

53:fd:43:ff:f4:c6:bb:89:fc:00:0c:79:76:9f:f9:52:27:ba:9b:73:43:16:99:6b:a6:e7:0d:90:1a:25:d9:bcSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.data Size: 6KB - Virtual size: 5KB

.text Size: 398KB - Virtual size: 398KB

.reloc Size: 18KB - Virtual size: 17KB

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

53:fd:43:ff:f4:c6:bb:89:fc:00:0c:79:76:9f:f9:52:27:ba:9b:73:43:16:99:6b:a6:e7:0d:90:1a:25:d9:bc
Signer

.data
Size: 6KB - Virtual size: 5KB

.text
Size: 398KB - Virtual size: 398KB

.reloc
Size: 18KB - Virtual size: 17KB