b5c818453df57c97bcee51830bfcb870_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

b5c818453df57c97bcee51830bfcb870_NeikiAnalytics
Size

1.2MB
MD5

b5c818453df57c97bcee51830bfcb870
SHA1

e492c8971e76a3ff4929637ecf9661ffa7955c50
SHA256

ac4dbb7fc6c0747bf84e996b0be64e53ff8eb095a548a940e151c6edd81d6a51
SHA512

3f4a080686e616bce8793ae726afd942f63bc82c0701d107359c4b093080ac8fcccd8036454220cc150fdfb44ac3375b3cc57e74e1adcb048116e7f2d321140c
SSDEEP

24576:fc1mlRHrcGJwzbezArSZR29kFinyJiGViRLRyawg3PY5AQ:fc1Mxr9JwzbYArSZRykFSsiDRLRyazPN

Score

1^/10

Malware Config

Signatures

Files

b5c818453df57c97bcee51830bfcb870_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

8a050fdcf8a6aa995f44dcdc1218b881

Code Sign

5a:b5:35:b2:74:9e:24:2e:6d:6b:cd:e3:14:2d:28:31
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

30/01/2013, 00:00

Not After

30/01/2015, 23:59

Subject

CN=Caphyon SRL,OU=SECURE APPLICATION DEVELOPMENT,O=Caphyon SRL,L=Craiova,ST=Dolj,C=RO

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:68:94:65:d7:70:fe:80:2e:f8:bb:34:f3:84:06:1d:e9:61:ba:99
Signer

Actual PE Digest

0e:68:94:65:d7:70:fe:80:2e:f8:bb:34:f3:84:06:1d:e9:61:ba:99

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msi

ord70
ord171
ord125
ord8
ord17
ord211
ord145
ord74

kernel32

GetComputerNameW
GetComputerNameA
FindFirstFileW
RemoveDirectoryA
RemoveDirectoryW
FindFirstFileA
GetVersionExW
WaitForSingleObject
FindClose

comdlg32

GetOpenFileNameA
GetOpenFileNameW

advapi32

GetUserNameA
GetUserNameW

shell32

SHFileOperationA
ShellExecuteExA
ShellExecuteExW
SHFileOperationW

Exports

Exports

DeleteExtractionPath
DeleteLZMAFiles
ExpandExtractionPath
ExtractLZMAFiles
FindEXE

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a050fdcf8a6aa995f44dcdc1218b881

Code Sign

5a:b5:35:b2:74:9e:24:2e:6d:6b:cd:e3:14:2d:28:31Certificate

Extended Key Usages

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5eCertificate

Extended Key Usages

Key Usages

0e:68:94:65:d7:70:fe:80:2e:f8:bb:34:f3:84:06:1d:e9:61:ba:99Signer

Headers

DLL Characteristics

File Characteristics

Imports

msi

kernel32

comdlg32

advapi32

shell32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 12B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 304B

5a:b5:35:b2:74:9e:24:2e:6d:6b:cd:e3:14:2d:28:31
Certificate

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

0e:68:94:65:d7:70:fe:80:2e:f8:bb:34:f3:84:06:1d:e9:61:ba:99
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 12B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 304B