979b0cf187b0b8f614b897480e8a05052ec661be41de93b0a8a8ad7f9e0edc34_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

979b0cf187b0b8f614b897480e8a05052ec661be41de93b0a8a8ad7f9e0edc34_NeikiAnalytics.exe
Size

72KB
MD5

af3b21795c05421954c1b72d2cae16d0
SHA1

36fb1b59e30318aa8423f3d1185fbe168b4a0459
SHA256

979b0cf187b0b8f614b897480e8a05052ec661be41de93b0a8a8ad7f9e0edc34
SHA512

d511a0aaaa5ac031361536a15138fe89166deff607e824a6b9674cde05dad9a3e4c1ea419185531fcfc28e1048cf9ee1c532ea1e51ec128cc79bbedcf0c9cdb3
SSDEEP

1536:yfW8cY6UZM8+7c68RPFW8dYcT8Ty7o4BCziu:yfWB7GwcjPFFPbCR

Score

1^/10

Malware Config

Signatures

Files

979b0cf187b0b8f614b897480e8a05052ec661be41de93b0a8a8ad7f9e0edc34_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:08:e2:33:7a:56:70:40:c0:d5:00:00:00:00:01:08
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

14/09/2023, 19:14

Not After

04/09/2024, 19:14

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

21:b1:e2:7c:3a:bd:8d:e6:c0:b7:d7:58:08:16:06:aa:4f:df:c8:99:40:13:3b:ce:7f:32:93:b1:27:97:a0:c3
Signer

Actual PE Digest

21:b1:e2:7c:3a:bd:8d:e6:c0:b7:d7:58:08:16:06:aa:4f:df:c8:99:40:13:3b:ce:7f:32:93:b1:27:97:a0:c3

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\cjandia\Desktop\RD\FastJsonParser\System.Text.Json\obj\Release\System.Text.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:01:08:e2:33:7a:56:70:40:c0:d5:00:00:00:00:01:08Certificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

21:b1:e2:7c:3a:bd:8d:e6:c0:b7:d7:58:08:16:06:aa:4f:df:c8:99:40:13:3b:ce:7f:32:93:b1:27:97:a0:c3Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 61KB - Virtual size: 60KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

33:00:00:01:08:e2:33:7a:56:70:40:c0:d5:00:00:00:00:01:08
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

21:b1:e2:7c:3a:bd:8d:e6:c0:b7:d7:58:08:16:06:aa:4f:df:c8:99:40:13:3b:ce:7f:32:93:b1:27:97:a0:c3
Signer

.text
Size: 61KB - Virtual size: 60KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B