4974daec28d7fcb3b5f1dd99dc53deb0_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
4974daec28d7fcb3b5f1dd99dc53deb0_NeikiAnalytics.exe
Size 119KB
Sample240607-k8l2vafb64
SHA256 dd721ce1189509484d284e683e16d46480c2df77328fc58934ef79515637bd70
MD5 4974daec28d7fcb3b5f1dd99dc53deb0
SHA1 1e1b3710dab68d6a3ad5c1cb700394932aceac3c
SHA512 055c007cd3e57f59b3fd2e80c0c7d9387aaa7ce42bd545c7e1fc14bf466b86188efad3d19e6b33283281d7f16f7d8534b9354934001da457539082c576019839
SSDEEP 3072:TY38io2GKPRBa2lQBV+UdE+rECWp7hKvPF:TY3XiKPfgBV+UdvrEFp7hK1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

4974daec28d7fcb3b5f1dd99dc53deb0_NeikiAnalytics.exe

.dll 119KB

4974daec28d7fcb3b5f1dd99dc53deb0_NeikiAnalytics.exe

IMPHASH 37434fe31c525527aa4fd9f7c992e050
SHA256 dd721ce1189509484d284e683e16d46480c2df77328fc58934ef79515637bd70
MD5 4974daec28d7fcb3b5f1dd99dc53deb0
SHA1 1e1b3710dab68d6a3ad5c1cb700394932aceac3c
SHA512 055c007cd3e57f59b3fd2e80c0c7d9387aaa7ce42bd545c7e1fc14bf466b86188efad3d19e6b33283281d7f16f7d8534b9354934001da457539082c576019839
SSDEEP 3072:TY38io2GKPRBa2lQBV+UdE+rECWp7hKvPF:TY3XiKPfgBV+UdvrEFp7hK1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

5f:3f:2e:57:24:01:8b:b4:db:30:ed:08:1c:df:d8:c7:9b:c9:3c:b3

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Secure Application Development,O=Tonec Inc.,L=New York,ST=New York,C=US

Chains

Mar 21, 2013

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Serial Number

61:0c:12:06:00:00:00:00:00:1b

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 23, 2006 - May 23, 2016

Subject

CN=Tonec Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Secure Application Development,O=Tonec Inc.,L=New York,ST=New York,C=US

Serial Number

46:60:fc:32:bd:52:1d:77:f2:11:c1:33:6a:a9:8b:9e

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jun 2, 2010 - Jun 1, 2013

Minor OS version

Major OS version

Entry point

25926

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

x:\Projects\FileType\Release\IDMFType.pdb

4974daec28d7fcb3b5f1dd99dc53deb0_NeikiAnalytics.exe

PE Signature issue

msvcrt

kernel32

advapi32

generic