93e0b421f0a0831e5a41c0bfd8f61330_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
93e0b421f0a0831e5a41c0bfd8f61330_NeikiAnalytics.exe
Size 363KB
Sample240617-qc8hvswekm
SHA256 4ee8e3edeb8f05d415890125faddb506d0d2d9396234094ce04e019d0f0a8d2d
MD5 93e0b421f0a0831e5a41c0bfd8f61330
SHA1 9afaa8d062071dc7589b371f7504a312496e1da5
SHA512 13b6ae60e06fbfdcbe681f6656b7f4fd31833c7f12c94970c141d3d2fa7ae3b0900c084fac5d45fc9e14c4e7df7eb08fbb45b222ea5af1bfcf6371050dec2f89
SSDEEP 6144:oVUZ6npd2kos7ARIVE+CaoPFLTg1+PRHEz8BrvAO2eAAju:oKZtcMRIVE+OF5bB7Ieu
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

93e0b421f0a0831e5a41c0bfd8f61330_NeikiAnalytics.exe

.exe 363KB

93e0b421f0a0831e5a41c0bfd8f61330_NeikiAnalytics.exe

IMPHASH 1241417c40f997103d7a92f77cf9b696
SHA256 4ee8e3edeb8f05d415890125faddb506d0d2d9396234094ce04e019d0f0a8d2d
MD5 93e0b421f0a0831e5a41c0bfd8f61330
SHA1 9afaa8d062071dc7589b371f7504a312496e1da5
SHA512 13b6ae60e06fbfdcbe681f6656b7f4fd31833c7f12c94970c141d3d2fa7ae3b0900c084fac5d45fc9e14c4e7df7eb08fbb45b222ea5af1bfcf6371050dec2f89
SSDEEP 6144:oVUZ6npd2kos7ARIVE+CaoPFLTg1+PRHEz8BrvAO2eAAju:oKZtcMRIVE+OF5bB7Ieu
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Digest

3d:bd:aa:7f:d0:1a:65:5b:ad:da:bf:db:75:58:ff:7d:55:17:ba:b5:e2:85:1c:dd:27:72:c3:30:76:bc:4e:ba

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91510100MAC13UF2XR,CN=成都霁悦科技有限公司,O=成都霁悦科技有限公司,L=成都市,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c21e68890e983bde9ab98e696b0e68a80e69cafe4baa7e4b89ae5bc80e58f91e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e59b9be5b79de79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Chains

Jun 11, 2024

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

07:f6:2f:c4:75:14:15:80:d1:17:c2:44:48:43:66:d5

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 28, 2023 - Nov 27, 2026

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

68077

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Jenkins\.jenkins\workspace\MGame\Ultra Uninstaller\update\Release\update.pdb

kernel32

EnterCriticalSection LeaveCriticalSection CreateMutexW Sleep FindResourceExW GetModuleFileNameW LoadResource LockResource SizeofResource FindResourceW MultiByteToWideChar DeleteFileW GetLongPathNameW WaitForSingleObject GetCurrentProcess GetCurrentProcessId TerminateProcess GetExitCodeProcess OpenProcess FreeLibrary InitializeCriticalSection LoadLibraryW K32EnumProcesses K32GetModuleFileNameExW WideCharToMultiByte GetTempFileNameW SetFileAttributesW WritePrivateProfileStringW CopyFileW MoveFileW MoveFileExW CloseHandle DeleteCriticalSection InitializeCriticalSectionEx GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy GetLastError RaiseException WriteConsoleW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW GetProcAddress DecodePointer FindClose SetEndOfFile SetStdHandle IsDebuggerPresent OutputDebugStringW GetStringTypeW FormatMessageW EncodePointer SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW CompareStringW LCMapStringW GetLocaleInfoW GetCPInfo LocalFree GetCurrentThreadId ReleaseMutex lstrcpynW lstrcpyW lstrlenW IsProcessorFeaturePresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter InitializeSListHead GetFileSizeEx CreateFileW GetSystemWindowsDirectoryW GetVersionExW FreeResource LoadLibraryExW DeviceIoControl lstrcmpA RtlUnwind GetFileType SetFilePointerEx WriteFile GetConsoleOutputCP GetConsoleMode GetTimeZoneInformation CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetStdHandle IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers ReadFile ReadConsoleW

user32

wsprintfW

advapi32

LookupPrivilegeValueW RegCloseKey RegOpenKeyExW RegQueryValueExW GetTokenInformation RegSetValueExW RegEnumKeyExW AdjustTokenPrivileges OpenProcessToken RegCreateKeyExW

shell32

ShellExecuteExW

oleaut32

SysFreeString SysAllocStringLen SysStringLen

shlwapi

PathCombineW StrStrIA StrStrIW PathIsRelativeW PathFileExistsW PathRemoveFileSpecW PathAppendW StrTrimA StrCmpNIW StrCmpIW

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

wininet

InternetGetConnectedState

iphlpapi

GetAdaptersInfo

urlmon

URLDownloadToCacheFileW URLDownloadToFileW

ole32

CoCreateGuid

Sharing

General

Malware Config

Signatures

File Explorer

93e0b421f0a0831e5a41c0bfd8f61330_NeikiAnalytics.exe

kernel32

user32

advapi32

shell32

oleaut32

shlwapi

version

wininet

iphlpapi

urlmon

ole32

generic