5f06193c9d9ca44996f5c07514ff51ea3ea20ed618d9026acf395fe3301748a7_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5f06193c9d9ca44996f5c07514ff51ea3ea20ed618d9026acf395fe3301748a7_NeikiAnalytics.exe
Size

24KB
MD5

5c3ccc1e5a8aad0e53012501e8d31c40
SHA1

a0d474611e9be3ff63105cedc19c5a8ab40551f8
SHA256

5f06193c9d9ca44996f5c07514ff51ea3ea20ed618d9026acf395fe3301748a7
SHA512

67d2e5559ea2c9974043110d596156153fdcded1a2fe30abf173d2168e019a67934f7a21a8d97355d72dc81eb4b4bce601a1d0ade1fff835ce5505f06e636a07
SSDEEP

384:bK+xKfzQ2XFpOQGR9zos2clAKLHRN74u56/R9zZwu9oFQ:W+xAUiXOQ69zbjlAAX5e9zmQ

Score

1^/10

Malware Config

Signatures

Files

5f06193c9d9ca44996f5c07514ff51ea3ea20ed618d9026acf395fe3301748a7_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:25

Not After

01-09-2022 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:33

Not After

01-09-2022 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b9:e7:5f:e4:a9:9a:38:0d:05:25:ea:e5:d1:c1:75:7d:58:db:01:5c:60:6f:47:8b:43:a4:69:49:b7:16:93:46
Signer

Actual PE Digest

b9:e7:5f:e4:a9:9a:38:0d:05:25:ea:e5:d1:c1:75:7d:58:db:01:5c:60:6f:47:8b:43:a4:69:49:b7:16:93:46

Digest Algorithm

sha256

PE Digest Matches

false

b9:e7:5f:e4:a9:9a:38:0d:05:25:ea:e5:d1:c1:75:7d:58:db:01:5c:60:6f:47:8b:43:a4:69:49:b7:16:93:46
Signer

Actual PE Digest

b9:e7:5f:e4:a9:9a:38:0d:05:25:ea:e5:d1:c1:75:7d:58:db:01:5c:60:6f:47:8b:43:a4:69:49:b7:16:93:46

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc40fefa3af5cd00cc28dbd874038a4d

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

b9:e7:5f:e4:a9:9a:38:0d:05:25:ea:e5:d1:c1:75:7d:58:db:01:5c:60:6f:47:8b:43:a4:69:49:b7:16:93:46Signer

b9:e7:5f:e4:a9:9a:38:0d:05:25:ea:e5:d1:c1:75:7d:58:db:01:5c:60:6f:47:8b:43:a4:69:49:b7:16:93:46Signer

Headers

File Characteristics

Imports

kernel32

wininet

shell32

ntdll

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

b9:e7:5f:e4:a9:9a:38:0d:05:25:ea:e5:d1:c1:75:7d:58:db:01:5c:60:6f:47:8b:43:a4:69:49:b7:16:93:46
Signer

b9:e7:5f:e4:a9:9a:38:0d:05:25:ea:e5:d1:c1:75:7d:58:db:01:5c:60:6f:47:8b:43:a4:69:49:b7:16:93:46
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB