c26c6442204dc2867f8ddf33af657570_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

c26c6442204dc2867f8ddf33af657570_NeikiAnalytics.exe
Size

8.6MB
MD5

c26c6442204dc2867f8ddf33af657570
SHA1

056eb5809356bd142e50e1604ae5e65b4f13883d
SHA256

5363e7c1b67dd598832a2c43b1cfc0a6f484be1388d831ee84402f8ac0e124b8
SHA512

6a6260e650e34c414d56504950b1ac7553793c614a2308b121eeaafdd9d599c679d3d30c2a0ab4af51e415f906ff493bcd6562119aa050cf3d28589f0b05ab2f
SSDEEP

196608:8Ltxe5tRMDHJ0PGpO70/wvScNW9hO9sshDaaaB7A6o16z2i:mjwtmDHJ0+pO8w/N2hO9JEasHoHi

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Files

c26c6442204dc2867f8ddf33af657570_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

0b:4c:aa:be:e7:cf:a2:bc:d0:12:d6:39:24:fd:c2:fa
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

20-03-2023 00:00

Not After

19-03-2026 23:59

Subject

CN=DEIF A/S,O=DEIF A/S,L=Skive,C=DK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

75:db:f1:94:14:ec:fb:5a:70:99:85:56:e9:87:5a:ac:30:5b:96:ab
Signer

Actual PE Digest

75:db:f1:94:14:ec:fb:5a:70:99:85:56:e9:87:5a:ac:30:5b:96:ab

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

UPX0
Size: - Virtual size: 17.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 8.6MB - Virtual size: 8.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

0b:4c:aa:be:e7:cf:a2:bc:d0:12:d6:39:24:fd:c2:faCertificate

Extended Key Usages

Key Usages

75:db:f1:94:14:ec:fb:5a:70:99:85:56:e9:87:5a:ac:30:5b:96:abSigner

Headers

File Characteristics

Sections

UPX0 Size: - Virtual size: 17.8MB

UPX1 Size: 8.6MB - Virtual size: 8.6MB

.rsrc Size: 58KB - Virtual size: 60KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

0b:4c:aa:be:e7:cf:a2:bc:d0:12:d6:39:24:fd:c2:fa
Certificate

75:db:f1:94:14:ec:fb:5a:70:99:85:56:e9:87:5a:ac:30:5b:96:ab
Signer

UPX0
Size: - Virtual size: 17.8MB

UPX1
Size: 8.6MB - Virtual size: 8.6MB

.rsrc
Size: 58KB - Virtual size: 60KB