Static task
static1
Behavioral task
behavioral1
Sample
6848df8de5f26dd537fe35d2cdcd8640_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6848df8de5f26dd537fe35d2cdcd8640_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
6848df8de5f26dd537fe35d2cdcd8640_NeikiAnalytics.exe
-
Size
4.1MB
-
MD5
6848df8de5f26dd537fe35d2cdcd8640
-
SHA1
a3fe9a46ee56320d1d501d2d249279b2cdc7dcca
-
SHA256
d3d4c0dff25cce94619cceb329ac47b0c80a2998113e3e83f66fd19da5aaf868
-
SHA512
b5eb193e4d2d5cfef83b3f7943181ac226b115151a78593941725211ad0c9bd9d8f972c0d3504b6e8307871cc49594841a793eba6fb46ca89611795324212990
-
SSDEEP
98304:tteKg3L3Mtzua3L2Z6pwLc6GqKgFJGGKjs2SqrySCCeEN0jdB:ttj+L3id3L2Zi6GtgF4G72DXveENuD
Malware Config
Signatures
Files
-
6848df8de5f26dd537fe35d2cdcd8640_NeikiAnalytics.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
38:26:c7:6d:6c:e7:59:90:40:a3:bd:3b:ca:ca:ce:46Certificate
IssuerCN=OneClanUpdaterCode,1.2.840.113549.1.9.1=#0c1c6d61696c406f6e65636c616e75706461746572636f64652e6e616d65Not Before02/09/2020, 00:00Not After02/09/2021, 23:59SubjectCN=OneClanUpdaterCode,1.2.840.113549.1.9.1=#0c1c6d61696c406f6e65636c616e75706461746572636f64652e6e616d6503:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate
IssuerCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22/10/2014, 00:00Not After22/10/2024, 00:00SubjectCN=DigiCert Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before10/11/2006, 00:00Not After10/11/2021, 00:00SubjectCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
d:\Code\OneUpdater\Source\OneUpdater\obj\Release\OneUpdater.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ