47a1ea414663310d9de18c8e0fbe4a6d16d372f86fb7824b4201ebd20d109649_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

47a1ea414663310d9de18c8e0fbe4a6d16d372f86fb7824b4201ebd20d109649_NeikiAnalytics.exe
Size

166KB
MD5

1e4e940d8683246f7a7153d87f66ad80
SHA1

29a99222d2f6646a1126f7e5bb015c177b1bd6b0
SHA256

47a1ea414663310d9de18c8e0fbe4a6d16d372f86fb7824b4201ebd20d109649
SHA512

7b728244c8e48d45f2a7f1242add5ebcbecd6129eb162ca5d6dcfbd355553b88db271b7786d999c49cad2dd34e7b73efa958f56189517f1e4c71c4ee0176020f
SSDEEP

3072:7DL4ejMdE58TnPF1gv4XYXEXg8mu7xlzqRE:7gejMd1F1qUYXEXAu7xl3

Score

1^/10

Malware Config

Signatures

Files

47a1ea414663310d9de18c8e0fbe4a6d16d372f86fb7824b4201ebd20d109649_NeikiAnalytics.exe
.dll windows:4 windows x86 arch:x86

bdff83bd7f3939b2ed5a338f807254e0

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:b9:eb:69:16:19:3f:19:11:4b:26:3c:ab:8e:1d:05
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16/08/2023, 00:00

Not After

23/08/2024, 23:59

Subject

CN=BackToCAD Technologies LLC,O=BackToCAD Technologies LLC,L=Clearwater,ST=Florida,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e2:98:0a:de:2b:2e:d5:d9:6f:20:9b:29:db:b1:21:52:f2:da:3e:e4:b5:9e:79:0d:6c:c8:b6:01:34:c8:bc:af
Signer

Actual PE Digest

e2:98:0a:de:2b:2e:d5:d9:6f:20:9b:29:db:b1:21:52:f2:da:3e:e4:b5:9e:79:0d:6c:c8:b6:01:34:c8:bc:af

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

imagedll

img_save
img_loadRaster1BitPerPixel

mfc42

ord3663
ord2414
ord1641
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3626
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord537
ord800
ord1200
ord1176
ord1116
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord3692
ord354
ord5186
ord665
ord5442
ord3318
ord823
ord289
ord613
ord825
ord3081

msvcrt

_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
_onexit
__dllonexit
_EH_prolog
free
malloc
memmove
_ftol
strcmp
getenv
sscanf
fflush
fwrite
fread
memcpy
longjmp
__CxxLongjmpUnwind
_setjmp3
fopen
sprintf
fclose
memset
fabs
abs
sqrt
div
_splitpath
_strlwr
__CxxFrameHandler

kernel32

LocalFree
GlobalAlloc
LocalAlloc
GlobalFree

user32

MessageBoxA
GetActiveWindow

gdi32

GetObjectA
CreateDIBSection
DeleteObject
CreatePalette
SetDIBits

Exports

Exports

fio_openRaster
fio_saveRaster

Sections

.text
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdff83bd7f3939b2ed5a338f807254e0

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:b9:eb:69:16:19:3f:19:11:4b:26:3c:ab:8e:1d:05Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

e2:98:0a:de:2b:2e:d5:d9:6f:20:9b:29:db:b1:21:52:f2:da:3e:e4:b5:9e:79:0d:6c:c8:b6:01:34:c8:bc:afSigner

Headers

File Characteristics

Imports

imagedll

mfc42

msvcrt

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 128KB - Virtual size: 125KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 4KB - Virtual size: 816B

.reloc Size: 4KB - Virtual size: 1KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:b9:eb:69:16:19:3f:19:11:4b:26:3c:ab:8e:1d:05
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

e2:98:0a:de:2b:2e:d5:d9:6f:20:9b:29:db:b1:21:52:f2:da:3e:e4:b5:9e:79:0d:6c:c8:b6:01:34:c8:bc:af
Signer

.text
Size: 128KB - Virtual size: 125KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 4KB - Virtual size: 816B

.reloc
Size: 4KB - Virtual size: 1KB