959dc7cb484981641cfab6f50d6b1a90_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

959dc7cb484981641cfab6f50d6b1a90_NeikiAnalytics.exe
Size

1.8MB
MD5

959dc7cb484981641cfab6f50d6b1a90
SHA1

d0e5ddd823092d09f1bdff882e68904e7fc15d6a
SHA256

8c381dea1c4bebfb5704efe907bd51ae68e197a65abaf9fa2e0f04d0db03d51f
SHA512

eb9c8b1db8584df86a7658abdd50f666686ee7b0d62ddabcf3e86bed48e014acc9fe83a7ca754c05ff70bb35c3ee81e28cc203befa2aa0abfa37427378dd060e
SSDEEP

49152:sG4SL46M6c1yYWod0VUvCcII8r5/SEwDxy3JFY5T9:sGNL471yVUvPlsc

Score

1^/10

Malware Config

Signatures

Files

959dc7cb484981641cfab6f50d6b1a90_NeikiAnalytics.exe
.exe windows:10 windows x64 arch:x64

d5aec1c1f764856cfb4155cee3321234

Code Sign

33:00:00:06:ad:ac:dd:3c:98:83:5e:29:49:00:00:00:00:06:ad
Certificate

Issuer

CN=Microsoft Development PCA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

13/07/2023, 22:37

Not After

15/09/2024, 22:37

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:03:c6:f9:b4:c3:ae:be:59:4b:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Development Root Certificate Authority 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/05/2014, 17:33

Not After

28/05/2029, 17:43

Subject

CN=Microsoft Development PCA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

9a:af:bb:40:36:5f:63:6a:30:ce:bf:4a:0e:e8:05:05:74:54:8c:e5:e4:40:31:ba:38:b9:31:2e:fc:6f:16:37
Signer

Actual PE Digest

9a:af:bb:40:36:5f:63:6a:30:ce:bf:4a:0e:e8:05:05:74:54:8c:e5:e4:40:31:ba:38:b9:31:2e:fc:6f:16:37

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

hvax64.pdb

Imports

kdstub

KdInitializeLibrary

Exports

Exports

HvImageInfo
SvmBootInfo

Sections

.rdata
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 106B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 950KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Pad1
Size: - Virtual size: 972KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Pad2
Size: - Virtual size: 456KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 95B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

GFIDS
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d5aec1c1f764856cfb4155cee3321234

Code Sign

33:00:00:06:ad:ac:dd:3c:98:83:5e:29:49:00:00:00:00:06:adCertificate

Extended Key Usages

33:00:00:00:03:c6:f9:b4:c3:ae:be:59:4b:00:00:00:00:00:03Certificate

Key Usages

9a:af:bb:40:36:5f:63:6a:30:ce:bf:4a:0e:e8:05:05:74:54:8c:e5:e4:40:31:ba:38:b9:31:2e:fc:6f:16:37Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kdstub

Exports

Exports

Sections

.rdata Size: 116KB - Virtual size: 114KB

.idata Size: 4KB - Virtual size: 106B

.data Size: 36KB - Virtual size: 950KB

Pad1 Size: - Virtual size: 972KB

.text Size: 1.6MB - Virtual size: 1.6MB

Pad2 Size: - Virtual size: 456KB

.pdata Size: 68KB - Virtual size: 67KB

.edata Size: 4KB - Virtual size: 95B

GFIDS Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 1000B

.reloc Size: 4KB - Virtual size: 2KB

33:00:00:06:ad:ac:dd:3c:98:83:5e:29:49:00:00:00:00:06:ad
Certificate

33:00:00:00:03:c6:f9:b4:c3:ae:be:59:4b:00:00:00:00:00:03
Certificate

9a:af:bb:40:36:5f:63:6a:30:ce:bf:4a:0e:e8:05:05:74:54:8c:e5:e4:40:31:ba:38:b9:31:2e:fc:6f:16:37
Signer

.rdata
Size: 116KB - Virtual size: 114KB

.idata
Size: 4KB - Virtual size: 106B

.data
Size: 36KB - Virtual size: 950KB

Pad1
Size: - Virtual size: 972KB

.text
Size: 1.6MB - Virtual size: 1.6MB

Pad2
Size: - Virtual size: 456KB

.pdata
Size: 68KB - Virtual size: 67KB

.edata
Size: 4KB - Virtual size: 95B

GFIDS
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 1000B

.reloc
Size: 4KB - Virtual size: 2KB