dcb185bcf6006b69e6e1ddf1d9006050_NeikiAnalytics

Sharing

Copy URL

Twitter E-mail

General

Target

dcb185bcf6006b69e6e1ddf1d9006050_NeikiAnalytics
Size

4.1MB
MD5

dcb185bcf6006b69e6e1ddf1d9006050
SHA1

ffe70e25716c82824884b68b49bd1b9af474a3db
SHA256

4ca831fb9be6e2a8b8f427f7635b7d4cf7ba931d81d5d3da6450f80bbf424403
SHA512

3f8cbeaff54d937b0c0bcb06e3389144417695719c5a5d185bfa25028784767f073251b10b1a82da4b1394b0115ea9bbae9ed4a6fccf782d5ebf7bfa05067c27
SSDEEP

98304:0iWlpCactpihFh1cPIlDxehKv6PVGgKWrMU2nsCiNV:0dl8aYpEyP0DxehXGgKWrx2g

Score

1^/10

Malware Config

Signatures

Files

dcb185bcf6006b69e6e1ddf1d9006050_NeikiAnalytics
.exe windows:5 windows x86 arch:x86

762b6c41f88b6fa0c86015ba9e6e2f6f

Code Sign

ba:34:56:0c:96:df:dc:d7:8c:df:30:61:e2:27:96:82
Certificate

Issuer

CN=52201f2f18311d572f560b271a020721531729232121351c16372a14042518241f2d,POSTALCODE=10829,ST=0b1c1115005f5c4e190c06020416111211004f1a1102+ST=0b1c1115494a5c0203141202020e504510065319025209045100410317190c5653150d02501b141f001a0d01060a52121b130a53030f08110d1453190b1a055b0c0b0a070b

Not Before

01/02/2024, 10:45

Not After

31/01/2025, 10:45

Subject

CN=52201f2f18311d572f560b271a020721531729232121351c16372a14042518241f2d,POSTALCODE=10829,ST=0b1c1115005f5c4e190c06020416111211004f1a1102+ST=0b1c1115494a5c0203141202020e504510065319025209045100410317190c5653150d02501b141f001a0d01060a52121b130a53030f08110d1453190b1a055b0c0b0a070b

86:df:7f:79:29:f0:7b:d1:34:ae:96:e6:6b:47:82:d8:a7:b2:34:22:e9:71:6d:05:69:59:ab:d1:45:20:8b:0f
Signer

Actual PE Digest

86:df:7f:79:29:f0:7b:d1:34:ae:96:e6:6b:47:82:d8:a7:b2:34:22:e9:71:6d:05:69:59:ab:d1:45:20:8b:0f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\pajopukalex65\yozorovusas\febupamekada.pdb

Imports

kernel32

AddConsoleAliasW
GetFileAttributesExA
GetTickCount
GetConsoleTitleA
TlsSetValue
FatalAppExitW
FreeConsole
WriteConsoleW
GetModuleFileNameW
SetComputerNameExW
FindNextVolumeMountPointW
CreateJobObjectA
InterlockedExchange
GetLastError
GetLogicalDriveStringsW
VirtualAlloc
SetVolumeLabelW
RemoveDirectoryA
LoadLibraryA
OpenMutexA
InterlockedExchangeAdd
LocalAlloc
MoveFileA
GetNumberFormatW
GlobalFindAtomW
EnumResourceTypesW
GetModuleHandleA
VirtualProtect
GetConsoleProcessList
ReadConsoleOutputCharacterW
DeleteFileA
GetProcAddress
GetSystemDefaultLangID
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
HeapFree
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
EnterCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
SetStdHandle
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
CloseHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
RaiseException

gdi32

GetCharABCWidthsFloatA

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 38.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

762b6c41f88b6fa0c86015ba9e6e2f6f

Code Sign

ba:34:56:0c:96:df:dc:d7:8c:df:30:61:e2:27:96:82Certificate

86:df:7f:79:29:f0:7b:d1:34:ae:96:e6:6b:47:82:d8:a7:b2:34:22:e9:71:6d:05:69:59:ab:d1:45:20:8b:0fSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

gdi32

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 19KB - Virtual size: 38.9MB

.rsrc Size: 37KB - Virtual size: 36KB

ba:34:56:0c:96:df:dc:d7:8c:df:30:61:e2:27:96:82
Certificate

86:df:7f:79:29:f0:7b:d1:34:ae:96:e6:6b:47:82:d8:a7:b2:34:22:e9:71:6d:05:69:59:ab:d1:45:20:8b:0f
Signer

.text
Size: 4.0MB - Virtual size: 4.0MB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 19KB - Virtual size: 38.9MB

.rsrc
Size: 37KB - Virtual size: 36KB