64cd0c75e14d02b9f423ad2533306d10_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

64cd0c75e14d02b9f423ad2533306d10_NeikiAnalytics.exe
Size

1.4MB
MD5

64cd0c75e14d02b9f423ad2533306d10
SHA1

744ffa6d05ce494fbe61ddcc42e60c060e165217
SHA256

f80b66065daf4e2d61961bb966301e17231ab8ac033f4ece7c612d3a5b66dbbd
SHA512

fc69d92e63d50c3e079f4144f3a9b03d20c0c41256ad777ed460b3bca46ba5aa67dcc7cf8969f8758a06103569b975e8a90b3b2ac8b38bef36a32b82a82af82f
SSDEEP

24576:kD39v74lfGQrFUspugRNJI2DJ53J/J/L5dJPjoY:kp7E+QrFUBgq21

Score

1^/10

Malware Config

Signatures

Files

64cd0c75e14d02b9f423ad2533306d10_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:ca:7d:32:16:7c:7e:fd:05:03:00:00:00:00:00:ca
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07-09-2016 17:58

Not After

07-09-2018 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:728D-C45F-F9EB,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-08-2016 20:17

Not After

02-11-2017 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31-08-2010 22:19

Not After

31-08-2020 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03-04-2007 12:53

Not After

03-04-2021 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:f9:cc:ea:dd:aa:94:9a:8e:3d:df:62:2e:c4:f6:f5:40:6a:f7:08
Signer

Actual PE Digest

dc:f9:cc:ea:dd:aa:94:9a:8e:3d:df:62:2e:c4:f6:f5:40:6a:f7:08

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 698KB - Virtual size: 697KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

33:00:00:00:ca:7d:32:16:7c:7e:fd:05:03:00:00:00:00:00:caCertificate

Extended Key Usages

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40Certificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

dc:f9:cc:ea:dd:aa:94:9a:8e:3d:df:62:2e:c4:f6:f5:40:6a:f7:08Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 698KB - Virtual size: 697KB

.rsrc Size: 69KB - Virtual size: 69KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:00:ca:7d:32:16:7c:7e:fd:05:03:00:00:00:00:00:ca
Certificate

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

dc:f9:cc:ea:dd:aa:94:9a:8e:3d:df:62:2e:c4:f6:f5:40:6a:f7:08
Signer

.text
Size: 698KB - Virtual size: 697KB

.rsrc
Size: 69KB - Virtual size: 69KB

.reloc
Size: 512B - Virtual size: 12B