48cf0b40db1fba4794764a675188e1079cc11bf1fc6b10fdf897de6a9ea9f5bb_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

48cf0b40db1fba4794764a675188e1079cc11bf1fc6b10fdf897de6a9ea9f5bb_NeikiAnalytics.exe
Size

62KB
MD5

70ca9ec568c757724fd1df3e540a86c0
SHA1

3e81290ab29b2f24e916848d7fd80dc69063272f
SHA256

48cf0b40db1fba4794764a675188e1079cc11bf1fc6b10fdf897de6a9ea9f5bb
SHA512

dffd1abc6954b4ac67ac1ced63e5096d592df9d2cf5ca5be49cdddaeeed0ea9c8e86455994ed8c872e58051fd2711a1562ee02b24cae80c6f600461e6522a4e7
SSDEEP

1536:E6jNi7fMXv8r2QOLZdq7o8WcNmMR9jfIQs8Om:E6jNiTMXvdRLzq7o5cO+

Score

1^/10

Malware Config

Signatures

Files

48cf0b40db1fba4794764a675188e1079cc11bf1fc6b10fdf897de6a9ea9f5bb_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

a749458e854fc8a1a42965dae26c8bc8

Code Sign

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Certificate

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Not Before

16/04/2020, 18:36

Not After

16/04/2045, 18:44

Subject

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:6a:d1:6d:29:5d:d7:10:96:94:15:00:00:00:00:6a:d1
Certificate

Issuer

CN=Microsoft ID Verified CS EOC CA 02,O=Microsoft Corporation,C=US

Not Before

14/05/2024, 19:08

Not After

17/05/2024, 19:08

Subject

CN=GitHub\, Inc.,O=GitHub\, Inc.,L=San Francisco,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:6a:d1:6d:29:5d:d7:10:96:94:15:00:00:00:00:6a:d1
Certificate

Issuer

CN=Microsoft ID Verified CS EOC CA 02,O=Microsoft Corporation,C=US

Not Before

14/05/2024, 19:08

Not After

17/05/2024, 19:08

Subject

CN=GitHub\, Inc.,O=GitHub\, Inc.,L=San Francisco,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:05:fb:7a:5c:32:13:61:df:5d:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Not Before

13/04/2021, 17:31

Not After

13/04/2026, 17:31

Subject

CN=Microsoft ID Verified CS EOC CA 02,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Certificate

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Not Before

01/04/2021, 20:05

Not After

01/04/2036, 20:15

Subject

CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Certificate

Issuer

CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US

Not Before

19/11/2020, 20:32

Not After

19/11/2035, 20:42

Subject

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:3b:8a:69:59:be:14:05:64:71:00:00:00:00:00:3b
Certificate

Issuer

CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US

Not Before

15/02/2024, 20:36

Not After

15/02/2025, 20:36

Subject

CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7800-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

3d:f3:9a:84:de:27:43:2a:4f:6c:fe:c8:08:89:32:55:21:a6:a6:af:e7:20:19:6c:84:35:4e:9f:38:76:b9:8f
Signer

Actual PE Digest

3d:f3:9a:84:de:27:43:2a:4f:6c:fe:c8:08:89:32:55:21:a6:a6:af:e7:20:19:6c:84:35:4e:9f:38:76:b9:8f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

PDB Paths

Imports

msys-intl-8

libintl_bindtextdomain
libintl_gettext
libintl_setlocale
libintl_textdomain

msys-2.0

__cxa_atexit
__errno
__getreent
__locale_ctype_ptr
__locale_mb_cur_max
__main
__memcpy_chk
__sprintf_chk
__strcpy_chk
__swbuf_r
_dll_crt0@0
_exit
_impure_ptr
_lstat64
_stat64
abort
calloc
cygwin_conv_path
cygwin_internal
dll_dllcrt0
error
exit
fclose
fprintf
fputc_unlocked
fputs_unlocked
free
fstatat
fwrite
getcwd
getenv
getopt_long
iswprint
lstat
malloc
mbrtowc
mbsinit
memcmp
memcpy
memmove
memset
msys_detach_dll
nl_langinfo
optind
posix_memalign
printf
program_invocation_name
program_invocation_short_name
pthread_mutex_lock
pthread_mutex_unlock
readlink
realloc
setlocale
stat
stpcpy
strcasecmp
strchr
strcmp
strcpy
strlen
strncmp
strrchr
strspn
tolower
toupper

msys-gcc_s-1

__umoddi3

kernel32

FreeLibrary
GetACP
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryA

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a749458e854fc8a1a42965dae26c8bc8

Code Sign

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99Certificate

Key Usages

33:00:00:6a:d1:6d:29:5d:d7:10:96:94:15:00:00:00:00:6a:d1Certificate

Extended Key Usages

Key Usages

33:00:00:6a:d1:6d:29:5d:d7:10:96:94:15:00:00:00:00:6a:d1Certificate

Extended Key Usages

Key Usages

33:00:00:00:05:fb:7a:5c:32:13:61:df:5d:00:00:00:00:00:05Certificate

Key Usages

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07Certificate

Key Usages

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05Certificate

Extended Key Usages

Key Usages

33:00:00:00:3b:8a:69:59:be:14:05:64:71:00:00:00:00:00:3bCertificate

Extended Key Usages

Key Usages

3d:f3:9a:84:de:27:43:2a:4f:6c:fe:c8:08:89:32:55:21:a6:a6:af:e7:20:19:6c:84:35:4e:9f:38:76:b9:8fSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msys-intl-8

msys-2.0

msys-gcc_s-1

kernel32

Sections

.text Size: 24KB - Virtual size: 23KB

.data Size: 512B - Virtual size: 160B

.rdata Size: 7KB - Virtual size: 6KB

.buildid Size: 512B - Virtual size: 53B

/4 Size: 7KB - Virtual size: 6KB

.bss Size: - Virtual size: 5KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Certificate

33:00:00:6a:d1:6d:29:5d:d7:10:96:94:15:00:00:00:00:6a:d1
Certificate

33:00:00:6a:d1:6d:29:5d:d7:10:96:94:15:00:00:00:00:6a:d1
Certificate

33:00:00:00:05:fb:7a:5c:32:13:61:df:5d:00:00:00:00:00:05
Certificate

33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Certificate

33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Certificate

33:00:00:00:3b:8a:69:59:be:14:05:64:71:00:00:00:00:00:3b
Certificate

3d:f3:9a:84:de:27:43:2a:4f:6c:fe:c8:08:89:32:55:21:a6:a6:af:e7:20:19:6c:84:35:4e:9f:38:76:b9:8f
Signer

.text
Size: 24KB - Virtual size: 23KB

.data
Size: 512B - Virtual size: 160B

.rdata
Size: 7KB - Virtual size: 6KB

.buildid
Size: 512B - Virtual size: 53B

/4
Size: 7KB - Virtual size: 6KB

.bss
Size: - Virtual size: 5KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB