6109c0045f689fac5c86ef3129089e70_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6109c0045f689fac5c86ef3129089e70_NeikiAnalytics.exe
Size

58KB
MD5

6109c0045f689fac5c86ef3129089e70
SHA1

c2aef0089688beae60cf4b8a645f6d64efb75365
SHA256

ef957c48aa463cb5ac741a551f541af85d65581fab62b9ea76821d2a10e95875
SHA512

c76d406e5b3932bbeb11e0bb0cfcc10ec2781c06710494636b78c8e68446fea45b9a45e9d354a11f00cfb2f61d7d69cb5886b6ba95e6dc40a4347fb6050e63c9
SSDEEP

1536:LGVa5Kw14lEFJRqRCOsqimhYbi23vN2Tg7Nh:+qvgIOsQhYbiIvN20ph

Score

1^/10

Malware Config

Signatures

Files

6109c0045f689fac5c86ef3129089e70_NeikiAnalytics.exe
.dll windows:6 windows x86 arch:x86

75b26dd7f2baec335466c1ff19434195

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:7b:8e:11:4a:df:2c:a7:52:4b:9c:5a:bd:18:0a:a4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

31/08/2021, 00:00

Not After

30/08/2024, 23:59

Subject

SERIALNUMBER=91440101728218184Q,CN=Guangzhou ZHIYUAN Electronics Co.\, Ltd.,O=Guangzhou ZHIYUAN Electronics Co.\, Ltd.,L=Guangzhou,ST=Guangdong Province,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13094775616e677a686f75,1.3.6.1.4.1.311.60.2.1.2=#13124775616e67646f6e672050726f76696e6365,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

76:de:aa:99:5b:93:0d:f5:3a:14:cb:5e:cc:d0:8b:11:71:0e:6f:d5:e3:a5:a7:62:0b:e8:59:fa:96:d4:21:88
Signer

Actual PE Digest

76:de:aa:99:5b:93:0d:f5:3a:14:cb:5e:cc:d0:8b:11:71:0e:6f:d5:e3:a5:a7:62:0b:e8:59:fa:96:d4:21:88

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winmm

timeBeginPeriod
timeEndPeriod

msvcp120

_Xtime_get_ticks
_Thrd_join
_Thrd_sleep
_Thrd_equal
_Thrd_current
_Mtx_init
_Mtx_destroy
_Mtx_current_owns
_Mtx_lock
_Mtx_unlock
_Cnd_init
_Cnd_destroy
_Cnd_timedwait
_Cnd_broadcast
_Cnd_signal
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
??0_Pad@std@@QAE@XZ
??1_Pad@std@@QAE@XZ
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z
?_Release@_Pad@std@@QAEXXZ
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
_Xtime_diff_to_millis2
xtime_get
?_Xbad_alloc@std@@YAXXZ

msvcr120

memcpy
memcpy_s
__CxxFrameHandler3
??_V@YAXPAX@Z
?wait@Concurrency@@YAXI@Z
?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ
__RTDynamicCast
ceil
memset
_vsnprintf_s
_snprintf
printf
free
sprintf
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__clean_type_info_names_internal
_CxxThrowException
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
?terminate@@YAXXZ
memmove

ws2_32

ntohl
ntohs
recv
select
send
setsockopt
socket
listen
WSACleanup
WSAGetLastError
WSAIoctl
htons
htonl
connect
closesocket
bind
accept
__WSAFDIsSet
inet_ntoa
WSAStartup
inet_addr

kernel32

DisableThreadLibraryCalls
GetSystemTimeAsFileTime
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
EncodePointer

Exports

Exports

VCI_ClearBuffer
VCI_CloseDevice
VCI_GetReceiveNum
VCI_GetReference
VCI_InitCAN
VCI_OpenDevice
VCI_ReadBoardInfo
VCI_ReadCANStatus
VCI_ReadErrInfo
VCI_Receive
VCI_ResetCAN
VCI_SetReference
VCI_StartCAN
VCI_Transmit

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75b26dd7f2baec335466c1ff19434195

Code Sign

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

03:7b:8e:11:4a:df:2c:a7:52:4b:9c:5a:bd:18:0a:a4Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

76:de:aa:99:5b:93:0d:f5:3a:14:cb:5e:cc:d0:8b:11:71:0e:6f:d5:e3:a5:a7:62:0b:e8:59:fa:96:d4:21:88Signer

Headers

DLL Characteristics

File Characteristics

Imports

winmm

msvcp120

msvcr120

ws2_32

kernel32

Exports

Exports

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

03:7b:8e:11:4a:df:2c:a7:52:4b:9c:5a:bd:18:0a:a4
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

76:de:aa:99:5b:93:0d:f5:3a:14:cb:5e:cc:d0:8b:11:71:0e:6f:d5:e3:a5:a7:62:0b:e8:59:fa:96:d4:21:88
Signer

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB