85ab68712c5ecb805538bab90864eae0_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

85ab68712c5ecb805538bab90864eae0_NeikiAnalytics
Size

30KB
MD5

85ab68712c5ecb805538bab90864eae0
SHA1

e2cfb241f00c361bed808210639c391ad5e15161
SHA256

35750c3f25298d674a21ae577afd8102116cf4d367ca4df3afdae1c19dca450d
SHA512

c07660ae765e259039bd53b1d15880801464797de25f5553fb5df0db1694e54e8a0fb3cbe8cd3dd1a5884df5ab8e44c736aab30cde9066c0c74876a7b3ea4306
SSDEEP

384:j6t5FeWlKELzofkaP2VI46hq6ki2bix0GvHE6CjdAA1m5wM36QNuZLUUJQj:jiMEX30n3F2mxrE6Cxf1ml36QgZR4

Score

1^/10

Malware Config

Signatures

Files

85ab68712c5ecb805538bab90864eae0_NeikiAnalytics
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

18-03-2020 00:00

Not After

18-03-2045 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28-07-2020 00:00

Not After

28-07-2030 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

27-10-2023 14:45

Not After

27-10-2024 14:45

Subject

SERIALNUMBER=5743582,CN=Progress Software Corporation,O=Progress Software Corporation,STREET=15 Wayside Rd Ste 4,L=Burlington,ST=Massachusetts,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Not Before

19-11-2020 20:32

Not After

19-11-2035 20:42

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:37:02:4b:c5:2a:40:7a:35:4b:00:00:00:00:00:37
Certificate

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Not Before

15-02-2024 20:35

Not After

15-02-2025 20:35

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=Thales TSS ESN:BB73-96FD-77EF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

fa:26:6a:c8:61:fc:d5:49:0b:a2:02:c3:c5:d0:b5:aa:75:73:14:79:08:0f:9e:eb:55:94:d3:cc:db:48:bf:3d
Signer

Actual PE Digest

fa:26:6a:c8:61:fc:d5:49:0b:a2:02:c3:c5:d0:b5:aa:75:73:14:79:08:0f:9e:eb:55:94:d3:cc:db:48:bf:3d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\kendo\kendo\vsx-tools\src\StartExamplesAspNetCore\StartExamples\obj\Any CPU\Release\net8.0-windows\StartExamples.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8Certificate

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

09:55:7e:45:bd:c7:ad:80:36:5e:52:7fCertificate

Extended Key Usages

Key Usages

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05Certificate

Extended Key Usages

Key Usages

33:00:00:00:37:02:4b:c5:2a:40:7a:35:4b:00:00:00:00:00:37Certificate

Extended Key Usages

Key Usages

fa:26:6a:c8:61:fc:d5:49:0b:a2:02:c3:c5:d0:b5:aa:75:73:14:79:08:0f:9e:eb:55:94:d3:cc:db:48:bf:3dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 6KB - Virtual size: 6KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 512B - Virtual size: 12B

76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

09:55:7e:45:bd:c7:ad:80:36:5e:52:7f
Certificate

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Certificate

33:00:00:00:37:02:4b:c5:2a:40:7a:35:4b:00:00:00:00:00:37
Certificate

fa:26:6a:c8:61:fc:d5:49:0b:a2:02:c3:c5:d0:b5:aa:75:73:14:79:08:0f:9e:eb:55:94:d3:cc:db:48:bf:3d
Signer

.text
Size: 6KB - Virtual size: 6KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 512B - Virtual size: 12B