aa5f2ef2f7c04032c00bc703ee9d2c10_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

aa5f2ef2f7c04032c00bc703ee9d2c10_NeikiAnalytics
Size

14KB
MD5

aa5f2ef2f7c04032c00bc703ee9d2c10
SHA1

294badb58f26eef4ff7bdca694be87bb620cb74f
SHA256

1d7e7e73cf49031c22fad9ad5586aca54af4470bbf81a70d0d53d4d7ca05594b
SHA512

34bfe39f9b009ced7cb665206c0d6a57244740f8b4d0a6a41de44ec5d9c33d6b0959b03d79a70dfade32bfa7069fb0a2cf5936d5c022b59e3c27d76cbc85fa33
SSDEEP

192:DWwaWBSrQNxN+irGLWAaAXcrMHnhWgN7aAWS5wqnajE49d9Xkc9WR3Y:DWwaWOQ37reaQHRN73ClPOcm3Y

Score

1^/10

Malware Config

Signatures

Files

aa5f2ef2f7c04032c00bc703ee9d2c10_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

Code Sign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:20

Not After

11/08/2018, 20:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:45:a1:a6:42:6b:f3:c4:03:96:bb:f3:e6:55:97:e9:e4:b4:be:b2:a3:aa:06:60:d7:d6:85:4f:52:06:b1:55
Signer

Actual PE Digest

39:45:a1:a6:42:6b:f3:c4:03:96:bb:f3:e6:55:97:e9:e4:b4:be:b2:a3:aa:06:60:d7:d6:85:4f:52:06:b1:55

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

System.Reflection.Emit.ILGeneration.ni.pdb
E:\A\_work\2872\s\corefx\bin\obj\Windows_NT.AnyCPU.Release\System.Reflection.Emit.ILGeneration\netcoreapp\System.Reflection.Emit.ILGeneration.pdb

Sections

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

39:45:a1:a6:42:6b:f3:c4:03:96:bb:f3:e6:55:97:e9:e4:b4:be:b2:a3:aa:06:60:d7:d6:85:4f:52:06:b1:55Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.data Size: 512B - Virtual size: 4B

.text Size: 4KB - Virtual size: 4KB

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

39:45:a1:a6:42:6b:f3:c4:03:96:bb:f3:e6:55:97:e9:e4:b4:be:b2:a3:aa:06:60:d7:d6:85:4f:52:06:b1:55
Signer

.data
Size: 512B - Virtual size: 4B

.text
Size: 4KB - Virtual size: 4KB