fc9980ede1c760958aba9110d6d6f170_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

fc9980ede1c760958aba9110d6d6f170_NeikiAnalytics.exe
Size

285KB
MD5

fc9980ede1c760958aba9110d6d6f170
SHA1

5761312d0d53a1e3d126a711b399cec9f323c63c
SHA256

c447b38e68c54566d19d6c75fed12a1c65a7fa6229a8243d2ad49391b9c056d1
SHA512

3d80fba41a90b29fa0938dc21bd6ce3e8ee61e17e3a22bd10000cba9f7ac9dbf106695917eeced495a33a23d7a9bb4e71de1088d1613de93cb7193fae03cf5a5
SSDEEP

3072:J26vkzbH25fbuH6M7D9NSwIFYkw3xbZP5gFivJRVi1Ba43lhCiIFTZNYBAg0Fu1k:A6GMT80gxVpBafCbF1NkAOD1dCUvkD

Score

1^/10

Malware Config

Signatures

Files

fc9980ede1c760958aba9110d6d6f170_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

7d94a3c8e1057d8f134c6ff2bfc51913

Code Sign

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

19:9d:f8:8e
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign eCommerce Services Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Class 3 Code Signing CA,O=WoSign eCommerce Services Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

05:d9:c9:2a:76:5e:cd
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA,O=WoSign eCommerce Services Limited,C=CN

Not Before

26/12/2012, 05:33

Not After

29/12/2014, 13:59

Subject

CN=金华长风信息技术有限公司,O=金华长风信息技术有限公司,L=金华市,ST=浙江省,C=CN,1.2.840.113549.1.9.1=#0c156d696e676d696e674031376775616775612e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:56:88:84:30:19:89:34:ae:86:80:a4:7a:68:0c:2c:83:9d:0a:7b
Signer

Actual PE Digest

0d:56:88:84:30:19:89:34:ae:86:80:a4:7a:68:0c:2c:83:9d:0a:7b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
FreeConsole
WriteFile
GetModuleFileNameA
GetCurrentProcessId
CloseHandle
GetLastError
FlushFileBuffers
RtlUnwind
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
InterlockedExchange
VirtualQuery
VirtualAlloc
SetFilePointer
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
VirtualProtect
GetSystemInfo
RaiseException

Sections

.text
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d94a3c8e1057d8f134c6ff2bfc51913

Code Sign

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4cCertificate

Extended Key Usages

Key Usages

19:9d:f8:8eCertificate

Key Usages

05:d9:c9:2a:76:5e:cdCertificate

Extended Key Usages

Key Usages

0d:56:88:84:30:19:89:34:ae:86:80:a4:7a:68:0c:2c:83:9d:0a:7bSigner

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 188KB - Virtual size: 185KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 968B

.reloc Size: 8KB - Virtual size: 7KB

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

19:9d:f8:8e
Certificate

05:d9:c9:2a:76:5e:cd
Certificate

0d:56:88:84:30:19:89:34:ae:86:80:a4:7a:68:0c:2c:83:9d:0a:7b
Signer

.text
Size: 188KB - Virtual size: 185KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 968B

.reloc
Size: 8KB - Virtual size: 7KB