017f38334b75c04e25a914285d28d4c0_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

017f38334b75c04e25a914285d28d4c0_NeikiAnalytics.exe
Size

189KB
MD5

017f38334b75c04e25a914285d28d4c0
SHA1

a306164a621d3796af1d578756f513af3711782a
SHA256

fef24e8db31f9ba34b15853442b9d1f81f30edf5d6f03459cf40b3fb5337fa5d
SHA512

49979cc6a54c3da46f89dd157e922c2de08d918dd4bb1ccb226e89b87e009792d1ed25e5772ff9e95f9e3ced5fc6e7b9ad94412718a1101005df12542821a1fb
SSDEEP

3072:sJhVaq9LXhOXWWwBwAKB2FusWoIcn/HXFfbMmL5YvEGahdR:ejB8X+KAKwFtCo/l9L7fh/

Score

1^/10

Malware Config

Signatures

Files

017f38334b75c04e25a914285d28d4c0_NeikiAnalytics.exe
.dll .ps1 windows:4 windows x64 arch:x64 polyglot

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:26:6d:5e:de:6a:49:dd:26:44:c7:55:3e:79:43:92
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

06/05/2022, 00:00

Not After

05/05/2025, 23:59

Subject

SERIALNUMBER=7954709,CN=CLEVERFILES INC.,O=CLEVERFILES INC.,ST=Delaware,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

59:b9:0a:d9:29:8b:77:41:74:e4:01:31:16:d3:ab:13:35:c5:b2:6f:3c:bb:2c:de:92:6b:22:09:76:a5:05:b0
Signer

Actual PE Digest

59:b9:0a:d9:29:8b:77:41:74:e4:01:31:16:d3:ab:13:35:c5:b2:6f:3c:bb:2c:de:92:6b:22:09:76:a5:05:b0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate

Extended Key Usages

Key Usages

39:26:6d:5e:de:6a:49:dd:26:44:c7:55:3e:79:43:92Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

59:b9:0a:d9:29:8b:77:41:74:e4:01:31:16:d3:ab:13:35:c5:b2:6f:3c:bb:2c:de:92:6b:22:09:76:a5:05:b0Signer

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 177KB - Virtual size: 177KB

.rsrc Size: 1024B - Virtual size: 944B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

39:26:6d:5e:de:6a:49:dd:26:44:c7:55:3e:79:43:92
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

59:b9:0a:d9:29:8b:77:41:74:e4:01:31:16:d3:ab:13:35:c5:b2:6f:3c:bb:2c:de:92:6b:22:09:76:a5:05:b0
Signer

.text
Size: 177KB - Virtual size: 177KB

.rsrc
Size: 1024B - Virtual size: 944B