General

  • Target
    0fe37493949bec23e5427667ce0880f0_NeikiAnalytics.exe
  • Size 6.6MB
  • Sample240610-nm9gsshf96
  • SHA256 a2b60a1e9f267a4b23138926bd9473c4e88707285fdf7c2d58fd472c9ab6a824
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • 0fe37493949bec23e5427667ce0880f0_NeikiAnalytics.exe
    .exe 6.6MB

0fe37493949bec23e5427667ce0880f0_NeikiAnalytics.exe

  • IMPHASH 1dfa0dcb405b773583f08fbc69f5b927
  • SHA256 a2b60a1e9f267a4b23138926bd9473c4e88707285fdf7c2d58fd472c9ab6a824
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
60:7e:fc:06:5e:af:c9:50:4e:0d:af:5b:76:58:c1:c7:d2:8e:62:7b:c2:76:d5:27:21:d9:4f:f3:c6:83:ff:c6
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=CipSoft GmbH,O=CipSoft GmbH,L=Regensburg,ST=Bayern,C=DE
Chains

Jul 4, 2017

PE Signature issue

Digest
54:12:10:30:bf:fd:bb:b8:49:3e:02:aa:3b:cc:89:60:ac:ff:1a:23
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=CipSoft GmbH,O=CipSoft GmbH,L=Regensburg,ST=Bayern,C=DE
Chains

Jul 4, 2017

Minor OS version
1
Major OS version
5
Entry point
3759624
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
F:\Clients\TibiaPlayer\Release\TibiaRelease.pdb