2a6e2197bd734530e0b3a7dbe591bd70_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

2a6e2197bd734530e0b3a7dbe591bd70_NeikiAnalytics
Size

3.8MB
MD5

2a6e2197bd734530e0b3a7dbe591bd70
SHA1

3f4b08b93fc2bd4b76d76bb0c5bd8dfd46aa32a6
SHA256

bb4669e8892114f56236c8c253d02ef801da22bba2f29ac43f81ff1110cdf2a7
SHA512

559df98dd601f6171aec3dfbb83720ca93a35843bf2b3ed740371daeaa8832b97c7b2c461601e81a4e464275c8d8d31ae21937c6954582b393f22a399707c242
SSDEEP

49152:ftdvFBpDB0fc7vgSbPGn4J1OeMVwKFbnN5qGuwn64TcHfEOQ8:VJnpDKugSbPGn6Mtbxp6rj

Score

1^/10

Malware Config

Signatures

Files

2a6e2197bd734530e0b3a7dbe591bd70_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

db5a39e833370c46691d2eda5c0826d4

Code Sign

51:6b:fa:f9:f2:78:4b:e2:fd:5a:75:7a:8d:69:83:25
Certificate

Issuer

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

27/09/2018, 00:00

Not After

12/12/2018, 23:59

Subject

CN=FUTURAMA. BROLLYRAP,O=FUTURAMA. BROLLYRAP,POSTALCODE=LS11 5TY,STREET=Olympia\,\, House -\, Lockwood Court\,,L=LEEDS,ST=WEST YORKSHIRE,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09/05/2013, 00:00

Not After

08/05/2028, 23:59

Subject

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

Issuer

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/01/2010, 00:00

Not After

18/01/2038, 23:59

Subject

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetSystemTimeAsFileTime
GetACP
DeleteFileA
ExitProcess
GetVersion
FindFirstFileA
lstrcmpiA
GetTempPathA
FormatMessageW
GetFileAttributesA
GetBinaryTypeW
GetDateFormatA
MulDiv
RaiseException
InterlockedExchange
SetFileAttributesA
ResetEvent
TerminateThread
SetEndOfFile
SearchPathA
GetConsoleCP
GetTimeFormatA
GlobalFindAtomW
DuplicateHandle
UnlockFile
GetExitCodeProcess
GetVolumeInformationW
GetShortPathNameA
GetQueuedCompletionStatus
GlobalFlags
OpenProcess
FindNextFileA
CopyFileA
GetLastError
DeleteFileW
GetModuleHandleW
GetProcAddress
GetModuleHandleA
IsBadReadPtr
GetCurrentThreadId
LoadLibraryA
GetCommandLineW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetFilePointer
GetOEMCP
GetCPInfo
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
HeapAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
LCMapStringW
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
GetCommandLineA
GetStartupInfoA
GetTickCount
FreeLibrary
SetLastError
CloseHandle

user32

AppendMenuW
TrackPopupMenu
EndPaint
GetClientRect
LoadStringW
ReleaseDC
wsprintfA
CharNextW
EnableMenuItem
BeginPaint
GetWindowThreadProcessId
EndDialog
CheckMenuRadioItem
SetClassLongW
DispatchMessageW
SetWindowLongW
IsWindowVisible
DestroyWindow
LoadAcceleratorsW
CloseClipboard
TranslateAcceleratorW
MoveWindow
GetParent
GetWindowLongA
GetMessagePos
SetFocus
RegisterClassExW
TrackPopupMenuEx
EmptyClipboard
SetCursor
IsWindowEnabled
TranslateMessage
DefWindowProcA
CheckDlgButton
LoadBitmapA
GetSubMenu
GetClassNameW
GetClassInfoExW
SendMessageTimeoutA
SendMessageW
GetWindowLongW
GetSystemMetrics
InvalidateRect

gdi32

DeleteMetaFile

advapi32

RegCreateKeyExW

ws2_32

WSAAddressToStringA
WSAConnect
WSASend

Sections

41421
Size: 860KB - Virtual size: 859KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

41422
Size: 408KB - Virtual size: 407KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�41423
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db5a39e833370c46691d2eda5c0826d4

Code Sign

51:6b:fa:f9:f2:78:4b:e2:fd:5a:75:7a:8d:69:83:25Certificate

Extended Key Usages

Key Usages

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:afCertificate

Extended Key Usages

Key Usages

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9dCertificate

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ws2_32

Sections

41421 Size: 860KB - Virtual size: 859KB

41422 Size: 408KB - Virtual size: 407KB

�41423 Size: 2.5MB - Virtual size: 2.5MB

51:6b:fa:f9:f2:78:4b:e2:fd:5a:75:7a:8d:69:83:25
Certificate

2e:7c:87:cc:0e:93:4a:52:fe:94:fd:1c:b7:cd:34:af
Certificate

4c:aa:f9:ca:db:63:6f:e0:1f:f7:4e:d8:5b:03:86:9d
Certificate

41421
Size: 860KB - Virtual size: 859KB

41422
Size: 408KB - Virtual size: 407KB

�41423
Size: 2.5MB - Virtual size: 2.5MB