e70fe871268113f7bc0636957726de20_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

e70fe871268113f7bc0636957726de20_NeikiAnalytics.exe
Size

2.8MB
MD5

e70fe871268113f7bc0636957726de20
SHA1

b67ab0dd766edf5424649d1dcbf3dff094df2ae1
SHA256

9b0e382bdf4bb7deafda254cf0ec34e4e598821e47134626772b2249147cf2b0
SHA512

4f3a8f90cf98361f428366772cfbed019404349f6eea968df9af8b2ddef1332b9e2363dd829f356b6bbc28aaf0919fc277b689eb36c3d86452dda5bf0994ee77
SSDEEP

49152:/cxChrAxiWZgBnjb6Q41S0ZHFM1DGbePMCDl9qYWCf6sBsg5NaVVmUJ:BkiW+gQ2VleDGblMJWE6O9ra8q

Score

1^/10

Malware Config

Signatures

Files

e70fe871268113f7bc0636957726de20_NeikiAnalytics.exe
.exe windows:6 windows x86 arch:x86

Code Sign

53:04:6f:dd:48:2a:82:88:4d:0b:9f:50:cd:ac:fb:da
Certificate

Issuer

CN=IndusSinks Excuse Group

Not Before

06/02/2023, 08:00

Not After

06/02/2024, 08:00

Subject

CN=IndusSinks Excuse Group

99:43:23:c2:5e:fa:03:23:2f:ae:e8:82:ff:fc:ba:20:b0:c9:4e:4d:03:f8:9b:fc:a6:02:33:11:5d:4f:f0:60
Signer

Actual PE Digest

99:43:23:c2:5e:fa:03:23:2f:ae:e8:82:ff:fc:ba:20:b0:c9:4e:4d:03:f8:9b:fc:a6:02:33:11:5d:4f:f0:60

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 1.8MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 18KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 291KB - Virtual size: 824KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 223KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 69KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

53:04:6f:dd:48:2a:82:88:4d:0b:9f:50:cd:ac:fb:daCertificate

99:43:23:c2:5e:fa:03:23:2f:ae:e8:82:ff:fc:ba:20:b0:c9:4e:4d:03:f8:9b:fc:a6:02:33:11:5d:4f:f0:60Signer

Headers

DLL Characteristics

File Characteristics

Sections

Size: 1.8MB - Virtual size: 9.1MB

Size: 5KB - Virtual size: 16KB

Size: 18KB - Virtual size: 48KB

Size: 291KB - Virtual size: 824KB

Size: 5KB - Virtual size: 64KB

Size: 1KB - Virtual size: 280KB

.rsrc Size: 223KB - Virtual size: 1.4MB

Size: 69KB - Virtual size: 160KB

.qtmetad Size: 404KB - Virtual size: 404KB

.adata Size: - Virtual size: 4KB

53:04:6f:dd:48:2a:82:88:4d:0b:9f:50:cd:ac:fb:da
Certificate

99:43:23:c2:5e:fa:03:23:2f:ae:e8:82:ff:fc:ba:20:b0:c9:4e:4d:03:f8:9b:fc:a6:02:33:11:5d:4f:f0:60
Signer

.rsrc
Size: 223KB - Virtual size: 1.4MB

.qtmetad
Size: 404KB - Virtual size: 404KB

.adata
Size: - Virtual size: 4KB