4b90f20a63cdc26b4eda3a5114dcb82be870d79b88028c2e0a3ab949ac363c70_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

4b90f20a63cdc26b4eda3a5114dcb82be870d79b88028c2e0a3ab949ac363c70_NeikiAnalytics.exe
Size

15KB
MD5

57c0e6903deb35217424db70730bd470
SHA1

0b667e1b21ec0203d9969b6694bd7f315a887fe2
SHA256

4b90f20a63cdc26b4eda3a5114dcb82be870d79b88028c2e0a3ab949ac363c70
SHA512

7e32bdb5100fbd7f92bcd682a0a6ddcad5b5a5044e5e673104634a687c267335d64df3910e791850f4c45eeea3637c5fdd55e6e75aeaa956b907aa07855ee174
SSDEEP

384:vv4kfLRnoRiRP6ki2yh7OtmGoGCJEF8ZpHeSo:vgsFlRS2GSsEFiRr

Score

1^/10

Malware Config

Signatures

Files

4b90f20a63cdc26b4eda3a5114dcb82be870d79b88028c2e0a3ab949ac363c70_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

Code Sign

6f:12:6c:9c:c2:87:de:45:8c:e8:90:f6
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

20/03/2024, 14:23

Not After

21/03/2026, 14:23

Subject

SERIALNUMBER=1027700229193,CN=YANDEX LLC,O=YANDEX LLC,STREET=Lev Tolstoy street\, 16,L=Moscow,ST=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

18/03/2020, 00:00

Not After

18/03/2045, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:8e:9c:23:2e:14:08:99:90:6e:0d:55:32:cd:81:af:ff:ff:9d:c0:91:e3:ff:b0:b8:3e:00:55:10:68:15:d7
Signer

Actual PE Digest

06:8e:9c:23:2e:14:08:99:90:6e:0d:55:32:cd:81:af:ff:ff:9d:c0:91:e3:ff:b0:b8:3e:00:55:10:68:15:d7

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\BuildAgent\work\6a6d135591f2f49f\src\out\Default\eventlog_provider.dll.pdb

Exports

Exports

?fn@@YA_NXZ

Sections

.text
Size: 512B - Virtual size: 19B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

6f:12:6c:9c:c2:87:de:45:8c:e8:90:f6Certificate

Extended Key Usages

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8Certificate

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

06:8e:9c:23:2e:14:08:99:90:6e:0d:55:32:cd:81:af:ff:ff:9d:c0:91:e3:ff:b0:b8:3e:00:55:10:68:15:d7Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.text Size: 512B - Virtual size: 19B

.rdata Size: 512B - Virtual size: 424B

.data Size: 512B - Virtual size: 8B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 20B

6f:12:6c:9c:c2:87:de:45:8c:e8:90:f6
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

76:53:fe:ac:75:46:48:93:f5:e5:d7:4a:48:3a:4e:f8
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

06:8e:9c:23:2e:14:08:99:90:6e:0d:55:32:cd:81:af:ff:ff:9d:c0:91:e3:ff:b0:b8:3e:00:55:10:68:15:d7
Signer

.text
Size: 512B - Virtual size: 19B

.rdata
Size: 512B - Virtual size: 424B

.data
Size: 512B - Virtual size: 8B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 20B