1de149ec5951d68137afb00e671cf0a0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1de149ec5951d68137afb00e671cf0a0_NeikiAnalytics.exe
Size

169KB
MD5

1de149ec5951d68137afb00e671cf0a0
SHA1

b94163da122b1c3ed9fdf6611238f4b16e8766e0
SHA256

a6ace47ca284ce3a2db6effeb9a87e9f0a5fe22fc21d7b00e58e8488bb32f402
SHA512

7364429a386aee8d92043ab4fd90f77e274cefad022a3eba69e44881ec0a4ade741e8ede4cde313a005beff7f8209d570ae5703571d37d3e49eea2c0aa38f4f9
SSDEEP

1536:iiyXYWiiDjbhxtmUhpuscCQ3Leurtwq4LfrUZuUcsvtN5ofCzQ:iiyXBH1p+sRKhrH4LfQuNfCM

Score

1^/10

Malware Config

Signatures

Files

1de149ec5951d68137afb00e671cf0a0_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:ad:72:bb:2b:67:38:ba:0f:8e:58:a4:06:3d:64:7d:15:f3:6c:58:a9:0b:d5:ea:cc:31:30:aa:c7:7a:2d:ab
Signer

Actual PE Digest

36:ad:72:bb:2b:67:38:ba:0f:8e:58:a4:06:3d:64:7d:15:f3:6c:58:a9:0b:d5:ea:cc:31:30:aa:c7:7a:2d:ab

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

msodbcsqlr17.pdb

Sections

.rdata
Size: 4KB - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:afCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

36:ad:72:bb:2b:67:38:ba:0f:8e:58:a4:06:3d:64:7d:15:f3:6c:58:a9:0b:d5:ea:cc:31:30:aa:c7:7a:2d:abSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 4KB - Virtual size: 232B

.rsrc Size: 152KB - Virtual size: 152KB

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

36:ad:72:bb:2b:67:38:ba:0f:8e:58:a4:06:3d:64:7d:15:f3:6c:58:a9:0b:d5:ea:cc:31:30:aa:c7:7a:2d:ab
Signer

.rdata
Size: 4KB - Virtual size: 232B

.rsrc
Size: 152KB - Virtual size: 152KB