6e52647b4e2a93afcfd16755a1ad0870_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

6e52647b4e2a93afcfd16755a1ad0870_NeikiAnalytics
Size

2.5MB
MD5

6e52647b4e2a93afcfd16755a1ad0870
SHA1

4ccd3b432999fe3c4296751ff8c2249c2ceb3ea0
SHA256

ddddc5127248406ea7068257f8d9501ac201489d768b617f5be7ae6eb504ca1b
SHA512

5612e64f35519d116025f6cb29c2c11c12a6022e173a1770a571464dff72f90e02c29f7b88a94697f9f839bce0adbd3611625907a4db6253b642d4a5445235a2
SSDEEP

24576:G0/SqoyJu5RB42u4415iIx0PSZabl65W2NdnmnMIlL2Yc4abIZdWFzE1v0R0vSxu:Gxmu582m15P00nmnM4atqZdd1v+0Krb0

Score

1^/10

Malware Config

Signatures

Files

6e52647b4e2a93afcfd16755a1ad0870_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

c9e381bcb478126e1c6e88b7c43aaeba

Code Sign

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:30

Not After

09-06-2027 11:30

Subject

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1f:6c:30:da:6e:cd:32:75:62:86:c1:35:2c:61:60:82
Certificate

Issuer

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-03-2021 12:33

Not After

19-03-2022 12:33

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,ST=Hokkaido,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19-05-2021 05:42

Not After

18-05-2032 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

29-10-2015 11:30

Not After

09-06-2027 11:30

Subject

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1f:6c:30:da:6e:cd:32:75:62:86:c1:35:2c:61:60:82
Certificate

Issuer

CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-03-2021 12:33

Not After

19-03-2022 12:33

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,ST=Hokkaido,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

19-05-2021 05:42

Not After

18-05-2032 05:42

Subject

CN=Certum Timestamp 2021,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19-05-2021 05:32

Not After

18-05-2036 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31-05-2021 06:43

Not After

17-09-2029 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3b:be:7f:04:7b:b8:99:0a:c1:9b:52:bf:7f:09:db:93:6b:af:98:54:d8:de:fc:5b:c4:b0:b1:79:18:bf:3e:69
Signer

Actual PE Digest

3b:be:7f:04:7b:b8:99:0a:c1:9b:52:bf:7f:09:db:93:6b:af:98:54:d8:de:fc:5b:c4:b0:b1:79:18:bf:3e:69

Digest Algorithm

sha256

PE Digest Matches

false

e8:bc:ad:b8:87:95:44:50:d5:5f:b6:72:33:56:d3:c9:c2:1d:20:a6
Signer

Actual PE Digest

e8:bc:ad:b8:87:95:44:50:d5:5f:b6:72:33:56:d3:c9:c2:1d:20:a6

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
FileTimeToLocalFileTime
GetUserDefaultUILanguage
LoadLibraryExA
WriteConsoleW
SetEnvironmentVariableA
GetSystemDefaultUILanguage
GetEnvironmentStringsW
FindFirstFileExW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
LCMapStringW
GetTimeFormatW
GetDateFormatW
EnumSystemLocalesW
IsValidLocale
GetOEMCP
IsValidCodePage
GetStringTypeW
GetCPInfo
ExitProcess
GetStdHandle
HeapQueryInformation
GetFileType
SetStdHandle
GetModuleHandleExW
GetCommandLineA
VirtualQuery
GetSystemInfo
RtlUnwind
OutputDebugStringW
GetLocaleInfoW
GlobalFlags
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameW
GetFileSize
FlushFileBuffers
CreateEventW
SetEvent
GetCurrentProcessId
lstrcmpA
GetCurrentThread
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
FormatMessageW
MulDiv
LocalFree
GlobalFree
LoadLibraryW
GetModuleHandleA
SetLastError
OutputDebugStringA
GetACP
DefineDosDeviceW
VirtualFree
VirtualAlloc
ReadFile
SetFilePointer
GetDriveTypeW
MultiByteToWideChar
DeviceIoControl
VerifyVersionInfoW
VerSetConditionMask
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
HeapFree
GetWindowsDirectoryW
GetCurrentProcess
GetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
lstrlenW
lstrcmpW
VirtualProtect
LoadLibraryExW
GetTimeZoneInformation
GetModuleHandleW
GetProcAddress
GetTickCount
GetVolumeInformationW
GetDiskFreeSpaceExW
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
WriteFile
CreateFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetComputerNameW
GetLocalTime
DeleteFileW
GetTempPathW
CloseHandle
ReleaseMutex
GetVersionExW
CreateDirectoryW
GetPrivateProfileStringW
CreateMutexW
Sleep
GetCommandLineW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
SetErrorMode
GetUserDefaultLCID
FindResourceW
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
GetLastError
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount

user32

SetCapture
MapDialogRect
RealChildWindowFromPoint
GetSysColorBrush
WindowFromPoint
CharUpperW
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
TranslateMessage
GetMessageW
RegisterClipboardFormatW
PostQuitMessage
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetMonitorInfoW
WinHelpW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
RemovePropW
GetPropW
ReleaseCapture
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
UpdateWindow
SetMenu
GetMenu
GetCapture
GetKeyState
EndDeferWindowPos
DeferWindowPos
InvalidateRect
EnableWindow
RegisterWindowMessageW
LoadIconW
BeginDeferWindowPos
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
IsDialogMessageW
GetWindow
GetWindowTextLengthW
SetWindowTextW
GetFocus
SetFocus
GetDlgCtrlID
IsRectEmpty
GetNextDlgGroupItem
MessageBeep
PostThreadMessageW
IntersectRect
CharNextW
CopyAcceleratorTableW
InvalidateRgn
SetRect
SetWindowContextHelpId
DestroyMenu
UnregisterDeviceNotification
EnumWindows
GetWindowTextW
GetWindowThreadProcessId
PostMessageW
IsIconic
SendMessageW
GetSystemMetrics
GetClientRect
DrawIcon
GetSubMenu
CheckMenuRadioItem
IsWindowVisible
CheckMenuItem
DrawMenuBar
GetMenuState
GetWindowRect
WaitForInputIdle
KillTimer
SetTimer
FillRect
SetForegroundWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
RegisterDeviceNotificationW
MonitorFromRect
LoadImageW
GetCursorPos
TrackPopupMenu
CreatePopupMenu
CreateMenu
InsertMenuItemW
wsprintfW
ModifyMenuW
EnableMenuItem
RemoveMenu
AppendMenuW
SetScrollRange
GetScrollPos
SetScrollPos
FrameRect
CopyRect
SetCursor
LoadCursorW
SetWindowPos
MoveWindow
ShowWindow
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetMenuItemCount
GetMenuItemID
GetParent
OffsetRect
SetRectEmpty
SendDlgItemMessageA
AdjustWindowRect
GetWindowInfo
UnregisterClassW
PrintWindow
GetWindowLongW
SetWindowLongW
TranslateAcceleratorW
LoadAcceleratorsW
MonitorFromWindow
ReleaseDC
GetDC
SetPropW
SystemParametersInfoW

gdi32

SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetMapMode
GetRgnBox
ExtTextOutW
TextOutW
SetViewportOrgEx
SetMapMode
SetViewportExtEx
SetBkMode
ExtSelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetClipBox
Escape
CreateRectRgnIndirect
CreateBitmap
SetBkColor
CreatePatternBrush
GetBkColor
GetTextColor
CreateFontIndirectW
GetTextExtentPoint32W
SetTextColor
CreateSolidBrush
GetDeviceCaps
CreateCompatibleBitmap
DeleteDC
EnumFontFamiliesExW
CreateCompatibleDC
SetBitmapBits
BitBlt
CreateDIBSection
DeleteObject
SelectObject
SetDIBColorTable
GetObjectW
GetBitmapBits

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

DeregisterEventSource
RegSetValueExW
RegCloseKey
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
ReportEventW
RegisterEventSourceW
StartServiceW
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW

shell32

Shell_NotifyIconW
ord680
ShellExecuteW
CommandLineToArgvW

comctl32

ImageList_ReplaceIcon
InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
UrlCreateFromPathW
PathFindExtensionW
SHDeleteKeyW
PathStripToRootW

uxtheme

SetWindowTheme

ole32

CoGetClassObject
CLSIDFromString
CoRevokeClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeEx
OleIsCurrentClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoInitialize
OleFlushClipboard

oleaut32

SysAllocStringLen
VariantChangeType
VariantCopy
LoadRegTypeLi
DispCallFunc
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayCreate
SafeArrayDestroy
VariantClear
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
OleCreateFontIndirect
SafeArrayGetElement
SysFreeString
SysAllocString
VariantInit

gdiplus

GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusShutdown
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdiplusStartup
GdipFree
GdipAlloc
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipGetImageWidth
GdipCloneImage
GdipCreateBitmapFromScan0

winmm

mciSendCommandW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

cfgmgr32

CM_Get_Device_IDW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 742KB - Virtual size: 741KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9e381bcb478126e1c6e88b7c43aaeba

Code Sign

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2Certificate

Extended Key Usages

Key Usages

1f:6c:30:da:6e:cd:32:75:62:86:c1:35:2c:61:60:82Certificate

Extended Key Usages

Key Usages

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2Certificate

Extended Key Usages

Key Usages

1f:6c:30:da:6e:cd:32:75:62:86:c1:35:2c:61:60:82Certificate

Extended Key Usages

Key Usages

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

3b:be:7f:04:7b:b8:99:0a:c1:9b:52:bf:7f:09:db:93:6b:af:98:54:d8:de:fc:5b:c4:b0:b1:79:18:bf:3e:69Signer

e8:bc:ad:b8:87:95:44:50:d5:5f:b6:72:33:56:d3:c9:c2:1d:20:a6Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

winmm

version

cfgmgr32

setupapi

oleacc

Sections

.text Size: 742KB - Virtual size: 741KB

.rdata Size: 236KB - Virtual size: 235KB

.data Size: 14KB - Virtual size: 50KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

1f:6c:30:da:6e:cd:32:75:62:86:c1:35:2c:61:60:82
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

6b:32:6a:0f:03:28:d3:7a:1d:53:0b:fd:23:bd:48:e2
Certificate

1f:6c:30:da:6e:cd:32:75:62:86:c1:35:2c:61:60:82
Certificate

f1:64:25:8c:09:b6:e2:7b:e2:0e:32:60:8e:4b:f4:a8
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

3b:be:7f:04:7b:b8:99:0a:c1:9b:52:bf:7f:09:db:93:6b:af:98:54:d8:de:fc:5b:c4:b0:b1:79:18:bf:3e:69
Signer

e8:bc:ad:b8:87:95:44:50:d5:5f:b6:72:33:56:d3:c9:c2:1d:20:a6
Signer

.text
Size: 742KB - Virtual size: 741KB

.rdata
Size: 236KB - Virtual size: 235KB

.data
Size: 14KB - Virtual size: 50KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB