General

  • Target
    a1476fc1e5b6e77998780d62c34fe1f0_NeikiAnalytics.exe
  • Size 136KB
  • Sample240603-m9sbcscd2y
  • SHA256 40f00ce68d74ee53d04dd242b76c8c4ec055f32d9c840b2877bbe48afb65bdab
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 1 IoCs

File Explorer

  • a1476fc1e5b6e77998780d62c34fe1f0_NeikiAnalytics.exe
    .exe 136KB
  • $PLUGINSDIR/System.dll
    .dll 21KB
  • $PLUGINSDIR/dmgr.exe
    .exe 138KB

a1476fc1e5b6e77998780d62c34fe1f0_NeikiAnalytics.exe

  • IMPHASH 28a099a911237a28521d8b7ea250f089
  • SHA256 40f00ce68d74ee53d04dd242b76c8c4ec055f32d9c840b2877bbe48afb65bdab
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
ad:e9:81:a1:7a:7c:bb:d2:8e:e5:f1:e0:cd:af:0c:fc:d9:a0:5b:f4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Solimba Aplicaciones S.L.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Solimba Aplicaciones S.L.,L=Badalona,ST=Barcelona,C=ES
Chains

Jun 8, 2012

Minor OS version
0
Major OS version
4
Entry point
17191
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED
PDB paths