c2e90f3d9fe5859cc30cc3de32a2d3c0_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

c2e90f3d9fe5859cc30cc3de32a2d3c0_NeikiAnalytics
Size

2.9MB
MD5

c2e90f3d9fe5859cc30cc3de32a2d3c0
SHA1

4b27eeaa74e7be3340941ccadfea2afdb8b88ba7
SHA256

9a8a0647fde30a0096a26414dcdec8ff729eb070fb17855258f67374e93af63d
SHA512

67f42f9cce0b46c8795b0a26fbb8697f360e622340734216c952dff0c07c2c0050f80169b89c453ea02ac9225b1dc24ba6708765d7acec58285b6b6178d3525e
SSDEEP

49152:8v6ucIZFybM37fZRbzHe/QG3E/bOSZ1RO9MD/qCt50om7f6sB/Yy+Nadv:1ucIffZRvK3Y6SZ1iMTSB76O/2yv

Score

1^/10

Malware Config

Signatures

Files

c2e90f3d9fe5859cc30cc3de32a2d3c0_NeikiAnalytics
.exe windows:6 windows x86 arch:x86

Code Sign

35:7c:9f:1a:c4:a7:d3:76:bf:14:82:ab:ea:3f:0f:40
Certificate

Issuer

CN=Flattodwiken Summoners Group

Not Before

05/02/2023, 21:00

Not After

05/02/2024, 21:00

Subject

CN=Flattodwiken Summoners Group

ee:1f:87:be:15:b5:79:d3:c0:ff:c6:70:0a:3a:a9:79:e9:75:68:c3:cc:b2:26:58:cb:75:ac:6a:51:79:ee:52
Signer

Actual PE Digest

ee:1f:87:be:15:b5:79:d3:c0:ff:c6:70:0a:3a:a9:79:e9:75:68:c3:cc:b2:26:58:cb:75:ac:6a:51:79:ee:52

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 1.9MB - Virtual size: 9.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 18KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 293KB - Virtual size: 832KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 223KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 69KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

35:7c:9f:1a:c4:a7:d3:76:bf:14:82:ab:ea:3f:0f:40Certificate

ee:1f:87:be:15:b5:79:d3:c0:ff:c6:70:0a:3a:a9:79:e9:75:68:c3:cc:b2:26:58:cb:75:ac:6a:51:79:ee:52Signer

Headers

DLL Characteristics

File Characteristics

Sections

Size: 1.9MB - Virtual size: 9.3MB

Size: 5KB - Virtual size: 16KB

Size: 18KB - Virtual size: 48KB

Size: 293KB - Virtual size: 832KB

Size: 5KB - Virtual size: 64KB

Size: 1KB - Virtual size: 280KB

.rsrc Size: 223KB - Virtual size: 1.4MB

Size: 69KB - Virtual size: 160KB

.qtmetad Size: 404KB - Virtual size: 404KB

.adata Size: - Virtual size: 4KB

35:7c:9f:1a:c4:a7:d3:76:bf:14:82:ab:ea:3f:0f:40
Certificate

ee:1f:87:be:15:b5:79:d3:c0:ff:c6:70:0a:3a:a9:79:e9:75:68:c3:cc:b2:26:58:cb:75:ac:6a:51:79:ee:52
Signer

.rsrc
Size: 223KB - Virtual size: 1.4MB

.qtmetad
Size: 404KB - Virtual size: 404KB

.adata
Size: - Virtual size: 4KB