6bbec8cae6a48c7055eeaed059bbb480_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6bbec8cae6a48c7055eeaed059bbb480_NeikiAnalytics.exe
Size

61KB
MD5

6bbec8cae6a48c7055eeaed059bbb480
SHA1

c220797403b76db649c093466b1b99623ec6e0db
SHA256

4b9ec18479939506e05b13605de3e6b9666dda8b9291285c0ce7f1205f7aa293
SHA512

49c449c37a7b5e2fc0dbda2694cf203981994c5247c8bf15393cce99b4fa4bdb165c2a140a8e72143fbe212c8d7ba4305fc3db8f7ca52caf8bce1eb2a0333e8e
SSDEEP

768:4x3LY+sPhWVJPsedLVDUYlkXrSXVteUdzttJ2z9IkCB7QtcNbWhNSSLNShSc:wL9nVJEetVDUxSpvJ2z9ID73bcISLIR

Score

1^/10

Malware Config

Signatures

Files

6bbec8cae6a48c7055eeaed059bbb480_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

db:3e:36:2b:e8:cc:6a:68:de:49:47:fe:b2:4c:da:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/04/2020, 00:00

Not After

14/10/2020, 23:59

Subject

CN=DIGITAL PROTECTION SERVICES S.R.L.,O=DIGITAL PROTECTION SERVICES S.R.L.,POSTALCODE=550107,STREET=STR. LUNGA NR. 65 AP. 37,L=SIBIU,ST=Sibiu,C=RO

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

db:3e:36:2b:e8:cc:6a:68:de:49:47:fe:b2:4c:da:82
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/04/2020, 00:00

Not After

14/10/2020, 23:59

Subject

CN=DIGITAL PROTECTION SERVICES S.R.L.,O=DIGITAL PROTECTION SERVICES S.R.L.,POSTALCODE=550107,STREET=STR. LUNGA NR. 65 AP. 37,L=SIBIU,ST=Sibiu,C=RO

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

24/05/2016, 00:00

Not After

24/06/2027, 00:00

Subject

CN=GlobalSign TSA for Standard - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e9:b5:b6:e8:9f:25:90:dc:46:a7:a3:2f:86:95:ea:b4:75:dd:72:f0:9f:30:ab:99:2e:e3:61:1e:49:eb:d5:9f
Signer

Actual PE Digest

e9:b5:b6:e8:9f:25:90:dc:46:a7:a3:2f:86:95:ea:b4:75:dd:72:f0:9f:30:ab:99:2e:e3:61:1e:49:eb:d5:9f

Digest Algorithm

sha256

PE Digest Matches

true

e1:24:19:22:71:86:85:86:e4:ae:f6:71:23:17:70:2a:27:63:f5:1a
Signer

Actual PE Digest

e1:24:19:22:71:86:85:86:e4:ae:f6:71:23:17:70:2a:27:63:f5:1a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14Certificate

Extended Key Usages

Key Usages

db:3e:36:2b:e8:cc:6a:68:de:49:47:fe:b2:4c:da:82Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

db:3e:36:2b:e8:cc:6a:68:de:49:47:fe:b2:4c:da:82Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8aCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

e9:b5:b6:e8:9f:25:90:dc:46:a7:a3:2f:86:95:ea:b4:75:dd:72:f0:9f:30:ab:99:2e:e3:61:1e:49:eb:d5:9fSigner

e1:24:19:22:71:86:85:86:e4:ae:f6:71:23:17:70:2a:27:63:f5:1aSigner

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 36KB - Virtual size: 34KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:d6:99:a7:64:97:3e:f1:f8:42:7e:e9:19:cc:53:41:14
Certificate

db:3e:36:2b:e8:cc:6a:68:de:49:47:fe:b2:4c:da:82
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

db:3e:36:2b:e8:cc:6a:68:de:49:47:fe:b2:4c:da:82
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

11:21:b4:55:35:1e:bb:1a:b2:4f:97:ef:07:fe:2a:b3:0b:8a
Certificate

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

e9:b5:b6:e8:9f:25:90:dc:46:a7:a3:2f:86:95:ea:b4:75:dd:72:f0:9f:30:ab:99:2e:e3:61:1e:49:eb:d5:9f
Signer

e1:24:19:22:71:86:85:86:e4:ae:f6:71:23:17:70:2a:27:63:f5:1a
Signer

.text
Size: 36KB - Virtual size: 34KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B