d2b6a0e268878c95a094538624179170_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

d2b6a0e268878c95a094538624179170_NeikiAnalytics
Size

125KB
MD5

d2b6a0e268878c95a094538624179170
SHA1

4ce59baa5b823005e77b24031caf56da4b1a8e98
SHA256

d856a1843746d44f4079cdd8f97f9fbbdaa44a7ffedaa7b17a6b45d39aa39448
SHA512

d71781743ade2ceafa4ea42ee84ee61f48caffc2dfa3ab6a2ddd68d80489d017c045e350539b7026c0c7bbb913d1788a3aa9cf5485511607ab60fbb0707c53eb
SSDEEP

3072:qE8Xugr6SSwewBpZb9kj4CgLIWsxIny1Ij1xZENPEUu6T:M6w1pXkj4CgLIWsxIZjfZUPfz

Score

1^/10

Malware Config

Signatures

Files

d2b6a0e268878c95a094538624179170_NeikiAnalytics
.dll windows:4 windows x64 arch:x64

Code Sign

33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

04/08/2022, 20:23

Not After

03/08/2023, 20:23

Subject

CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

59:9b:d2:c0:63:64:5f:de:f0:8a:82:70:6d:57:63:c3:ca:d3:2c:7c:13:46:33:90:f0:2a:17:be:6c:81:c3:fe
Signer

Actual PE Digest

59:9b:d2:c0:63:64:5f:de:f0:8a:82:70:6d:57:63:c3:ca:d3:2c:7c:13:46:33:90:f0:2a:17:be:6c:81:c3:fe

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

System.Windows.Input.Manipulations.ni.pdb
/_/artifacts/obj/System.Windows.Input.Manipulations/x64/Release/net6.0/System.Windows.Input.Manipulations.pdb

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

59:9b:d2:c0:63:64:5f:de:f0:8a:82:70:6d:57:63:c3:ca:d3:2c:7c:13:46:33:90:f0:2a:17:be:6c:81:c3:feSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 105KB - Virtual size: 105KB

.data Size: 8KB - Virtual size: 7KB

.reloc Size: 1024B - Virtual size: 652B

33:00:00:03:04:c1:03:19:7e:c6:05:e4:04:00:00:00:00:03:04
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

59:9b:d2:c0:63:64:5f:de:f0:8a:82:70:6d:57:63:c3:ca:d3:2c:7c:13:46:33:90:f0:2a:17:be:6c:81:c3:fe
Signer

.text
Size: 105KB - Virtual size: 105KB

.data
Size: 8KB - Virtual size: 7KB

.reloc
Size: 1024B - Virtual size: 652B