Static task
static1
Behavioral task
behavioral1
Sample
8d18c8bf0068b976b324e8ae24b1b5e0_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8d18c8bf0068b976b324e8ae24b1b5e0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
8d18c8bf0068b976b324e8ae24b1b5e0_NeikiAnalytics.exe
-
Size
8.1MB
-
MD5
8d18c8bf0068b976b324e8ae24b1b5e0
-
SHA1
42aafb7056d06dc919eabf4253834eea5355b2be
-
SHA256
34979fa8798d2676c558d3eff06bd786d7decd8103874112c4ccf9894ac8d6fe
-
SHA512
20e46bbb8b7fa5b00114c14c43bda6a24e5519253d4d116b5891d255a1e27e145b3bd256dd58bcf01690ae20dd422ed0391f5236b1887a2043434e05fa94daf8
-
SSDEEP
196608:XRqj1ONLCWqpjxtxaKPG4q9qz/GE6r4pvmwB3C6EFZyxd6qde8S9eQK5Ld23tIqC:4Ajqpjxja0Gd9K/GE6rrGCbwd6oS9eQC
Malware Config
Signatures
Files
-
8d18c8bf0068b976b324e8ae24b1b5e0_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
06:23:7f:3a:51:27:2e:74:b0:de:02:24:43:b6:24:e6Certificate
IssuerCN=OneEasyUpdaterDirect,1.2.840.113549.1.9.1=#0c21737570706f7274406f6e6565617379757064617465726469726563742e696e666fNot Before14/08/2019, 00:00Not After14/08/2020, 23:59SubjectCN=OneEasyUpdaterDirect,1.2.840.113549.1.9.1=#0c21737570706f7274406f6e6565617379757064617465726469726563742e696e666f30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02/05/2019, 00:00Not After18/01/2038, 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before02/05/2019, 00:00Not After01/08/2030, 23:59SubjectCN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
d:\Code\OneUpdater\Source\OneUpdater\obj\Release\OneUpdater.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 8.0MB - Virtual size: 8.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ