cd314034a38babed20f26895658a1d20_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

cd314034a38babed20f26895658a1d20_NeikiAnalytics
Size

157KB
MD5

cd314034a38babed20f26895658a1d20
SHA1

9760f3d6e71edfe444ed98cee2182673a16dcaf5
SHA256

a6ed51d45dab5e07ec4b4989fb6af39b9760d5433ca547dbc0b86bf434d74588
SHA512

8971a3b18a59257ae864dd44d389ac3a0b2a6f6a963ce88dc8d5032166f09ddd4cb26eaf233d2515960c4cec902a934a473ccd8724e8b93ab017d77a789d0516
SSDEEP

3072:CWaWV41gCRxuqlQVheVmDmwl2lQBV+UdE+rECWp7hKK:CWaUOduPK1wpBV+UdvrEFp7hKK

Score

1^/10

Malware Config

Signatures

Files

cd314034a38babed20f26895658a1d20_NeikiAnalytics
.dll windows:5 windows x86 arch:x86

21e7f63615e836920a9df976b21d51ab

Code Sign

5c:d0:50:29:20:c2:7e:ea:ec:2a:18:4d:04:52:e5:3a
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

16/01/2018, 00:00

Not After

30/03/2021, 23:59

Subject

CN=IObit Information Technology,O=IObit Information Technology,L=Chengdu,ST=Sichuan,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5c:d0:50:29:20:c2:7e:ea:ec:2a:18:4d:04:52:e5:3a
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

16/01/2018, 00:00

Not After

30/03/2021, 23:59

Subject

CN=IObit Information Technology,O=IObit Information Technology,L=Chengdu,ST=Sichuan,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

57:4d:0c:32:43:5b:ce:85:eb:18:8a:36:d1:29:67:d5:72:c7:b7:ef:47:86:a5:5e:8f:39:71:ea:9b:f7:69:d1
Signer

Actual PE Digest

57:4d:0c:32:43:5b:ce:85:eb:18:8a:36:d1:29:67:d5:72:c7:b7:ef:47:86:a5:5e:8f:39:71:ea:9b:f7:69:d1

Digest Algorithm

sha256

PE Digest Matches

false

ba:30:78:b7:6d:47:ac:a7:65:14:d2:01:1f:d6:19:38:81:6d:99:a3
Signer

Actual PE Digest

ba:30:78:b7:6d:47:ac:a7:65:14:d2:01:1f:d6:19:38:81:6d:99:a3

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ole32

CoTaskMemFree
CoUninitialize
CoInitializeEx
CoCreateInstance

oleaut32

VariantInit
VariantClear

kernel32

GetTickCount
LCMapStringW
LCMapStringA
Sleep
GetCurrentThreadId
GetCommandLineA
HeapAlloc
RaiseException
GetLastError
HeapFree
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW

Exports

Exports

camclosedll
camframedll
camheightdll
camopendll
camwidthdll

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21e7f63615e836920a9df976b21d51ab

Code Sign

5c:d0:50:29:20:c2:7e:ea:ec:2a:18:4d:04:52:e5:3aCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

5c:d0:50:29:20:c2:7e:ea:ec:2a:18:4d:04:52:e5:3aCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

57:4d:0c:32:43:5b:ce:85:eb:18:8a:36:d1:29:67:d5:72:c7:b7:ef:47:86:a5:5e:8f:39:71:ea:9b:f7:69:d1Signer

ba:30:78:b7:6d:47:ac:a7:65:14:d2:01:1f:d6:19:38:81:6d:99:a3Signer

Headers

File Characteristics

Imports

ole32

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 9KB

.reloc Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 936B

5c:d0:50:29:20:c2:7e:ea:ec:2a:18:4d:04:52:e5:3a
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

5c:d0:50:29:20:c2:7e:ea:ec:2a:18:4d:04:52:e5:3a
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

57:4d:0c:32:43:5b:ce:85:eb:18:8a:36:d1:29:67:d5:72:c7:b7:ef:47:86:a5:5e:8f:39:71:ea:9b:f7:69:d1
Signer

ba:30:78:b7:6d:47:ac:a7:65:14:d2:01:1f:d6:19:38:81:6d:99:a3
Signer

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 9KB

.reloc
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 936B