1a6e48e87b49d0e2af9ed87bfde924bedaa5174a147f8ca2f0094a2ab634eb37_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

1a6e48e87b49d0e2af9ed87bfde924bedaa5174a147f8ca2f0094a2ab634eb37_NeikiAnalytics.exe
Size

15KB
MD5

ad57916d8c7fdbd5445dac81a26529b0
SHA1

87eaedb858dca04e483df5fd08c5cbfbfbb62c7c
SHA256

1a6e48e87b49d0e2af9ed87bfde924bedaa5174a147f8ca2f0094a2ab634eb37
SHA512

ef1881b6e6a508736f8ca80c29d9a36b1b92b626a24f42d0f7db734c21bc708d3008e22a6a6032570935b0b97d4053628189a6f118f213ab8973a88a17b47688
SSDEEP

384:W0Wml2/UsIutiva9grzHDH/n/RJGBkS6sp7N:8RJtqPzHDHf/ckSN

Score

1^/10

Malware Config

Signatures

Files

1a6e48e87b49d0e2af9ed87bfde924bedaa5174a147f8ca2f0094a2ab634eb37_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

30:93:fe:16:48:5c:9d:4d:ce:5d:e5:c2
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

27-09-2023 08:58

Not After

30-08-2026 15:12

Subject

CN=OOO Nanosoft Razrabotka,O=OOO Nanosoft Razrabotka,L=Moscow,ST=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

07-11-2023 17:13

Not After

09-12-2034 17:13

Subject

CN=Globalsign TSA for CodeSign1 - R6 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10-12-2014 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

de:2a:7b:21:2a:3f:45:2e:75:e8:9d:95:b4:ba:6d:f5:00:4b:30:88:f3:2f:06:29:6e:f4:d3:bd:8b:7c:49:ac
Signer

Actual PE Digest

de:2a:7b:21:2a:3f:45:2e:75:e8:9d:95:b4:ba:6d:f5:00:4b:30:88:f3:2f:06:29:6e:f4:d3:bd:8b:7c:49:ac

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\BA\wrk\1c41fb80a2f4a155\sources\Cadwise.ModelsRepository.Filters\obj\Release\Cadwise.ModelsRepository.Filters.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Code Sign

30:93:fe:16:48:5c:9d:4d:ce:5d:e5:c2Certificate

Extended Key Usages

Key Usages

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

de:2a:7b:21:2a:3f:45:2e:75:e8:9d:95:b4:ba:6d:f5:00:4b:30:88:f3:2f:06:29:6e:f4:d3:bd:8b:7c:49:acSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 5KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 940B

.reloc Size: 512B - Virtual size: 12B

30:93:fe:16:48:5c:9d:4d:ce:5d:e5:c2
Certificate

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

de:2a:7b:21:2a:3f:45:2e:75:e8:9d:95:b4:ba:6d:f5:00:4b:30:88:f3:2f:06:29:6e:f4:d3:bd:8b:7c:49:ac
Signer

.text
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 940B

.reloc
Size: 512B - Virtual size: 12B