33f987f58dcc8834e8e88e2df32e89f0_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

33f987f58dcc8834e8e88e2df32e89f0_NeikiAnalytics.exe
Size

13KB
MD5

33f987f58dcc8834e8e88e2df32e89f0
SHA1

fd7b1713ed2a66c790856bb678eb2ea1f159b65a
SHA256

aea29242e0b69bee9c342b2d260065a95d36d6b2db67793bf8a23c95b95e8cfb
SHA512

7759af7a0ba244eb18c546457dc5cb50373d599c0bd6a9b1c69be3fe299fcaba85c5921f8c5da83577c2c7acd66e78619d2b88c30d801ece8200c824da635844
SSDEEP

192:E7QdNEknZQ3XLPVlD6NZf1KUl2ryHzhvEjtlAur9ZCspE+TMArLXA:E7QHhe7PVlkfQCT2UHeM4Q

Score

1^/10

Malware Config

Signatures

Files

33f987f58dcc8834e8e88e2df32e89f0_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

ee7cb4a1dbc04570233ef522c5ab5b76

Code Sign

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

3e:77:14:95:8e:26:ba:b7:fe:1c:43:27:9b:26:8a:27
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

22/08/2014, 00:00

Not After

22/08/2015, 23:59

Subject

CN=深圳市星辰帷幄信息技术有限公司,OU=研发中心,O=深圳市星辰帷幄信息技术有限公司,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:3b:69:15:1f:e4:42:87:58:ae:3d:4b:5c:7c:79:3c:b1:d6:84:ec
Signer

Actual PE Digest

19:3b:69:15:1f:e4:42:87:58:ae:3d:4b:5c:7c:79:3c:b1:d6:84:ec

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcr100

_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt

kernel32

DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
EncodePointer

Exports

Exports

?get_lock_for@lockpool@detail@atomics@boost@@CAAAVatomic_flag@4@PDX@Z

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee7cb4a1dbc04570233ef522c5ab5b76

Code Sign

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4cCertificate

Extended Key Usages

Key Usages

3e:77:14:95:8e:26:ba:b7:fe:1c:43:27:9b:26:8a:27Certificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

19:3b:69:15:1f:e4:42:87:58:ae:3d:4b:5c:7c:79:3c:b1:d6:84:ecSigner

Headers

DLL Characteristics

File Characteristics

Imports

msvcr100

kernel32

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 1024B

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 512B - Virtual size: 346B

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

3e:77:14:95:8e:26:ba:b7:fe:1c:43:27:9b:26:8a:27
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

19:3b:69:15:1f:e4:42:87:58:ae:3d:4b:5c:7c:79:3c:b1:d6:84:ec
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1024B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 512B - Virtual size: 346B