72efdedbef9ccc6bb9f4a4e92516e8917f363ec28fe92c29fde6f9956563a962_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

72efdedbef9ccc6bb9f4a4e92516e8917f363ec28fe92c29fde6f9956563a962_NeikiAnalytics.exe
Size

20KB
MD5

7d7319d92471f1f124c589e2264de470
SHA1

e64bdef5283ffe44b8178dfa2b2cc423b32cb7bf
SHA256

72efdedbef9ccc6bb9f4a4e92516e8917f363ec28fe92c29fde6f9956563a962
SHA512

200309f55bf5a4075a46e2000b9040569c4f1398bd52f1e24fa44ecaa2c2b6a9c693f8fcacc845407a9bd2cbf95c2a89be58ecb81a73634b406588e652fcdbaf
SSDEEP

384:vISNOVkvhafcqK1wWJTqwXcJWUTkWhBA4dysPKJP:fZvWcqNWkocnnBAoyDB

Score

1^/10

Malware Config

Signatures

Files

72efdedbef9ccc6bb9f4a4e92516e8917f363ec28fe92c29fde6f9956563a962_NeikiAnalytics.exe
.dll windows:10 windows x86 arch:x86

f7b4e94ea8a9eb9b338ec500652dc97a

Code Sign

33:00:00:06:ad:ac:dd:3c:98:83:5e:29:49:00:00:00:00:06:ad
Certificate

Issuer

CN=Microsoft Development PCA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

13/07/2023, 22:37

Not After

15/09/2024, 22:37

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

33:00:00:00:03:c6:f9:b4:c3:ae:be:59:4b:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Development Root Certificate Authority 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/05/2014, 17:33

Not After

28/05/2029, 17:43

Subject

CN=Microsoft Development PCA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:07:2e:7d:d0:1e:e7:93:a1:ce:53:57:03:db:14:51:ff:92:b6:4f:6e:6e:90:64:9c:d5:a6:c8:10:fc:f8:e5
Signer

Actual PE Digest

ee:07:2e:7d:d0:1e:e7:93:a1:ce:53:57:03:db:14:51:ff:92:b6:4f:6e:6e:90:64:9c:d5:a6:c8:10:fc:f8:e5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msg711.pdb

Imports

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm

api-ms-win-crt-private-l1-1-0

_o___std_type_info_destroy_list
_o__cexit
_o__configure_narrow_argv
_o__execute_onexit_table
_o__initialize_narrow_environment
_o__initialize_onexit_table
memcpy
_o__seh_filter_dll
_except_handler4_common

api-ms-win-crt-string-l1-1-0

memset

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-core-libraryloader-l1-2-0

LoadStringW
DisableThreadLibraryCalls

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-mm-misc-l1-1-0

GetDriverModuleHandle
DefDriverProc

Exports

Exports

DriverProc

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f7b4e94ea8a9eb9b338ec500652dc97a

Code Sign

33:00:00:06:ad:ac:dd:3c:98:83:5e:29:49:00:00:00:00:06:adCertificate

Extended Key Usages

33:00:00:00:03:c6:f9:b4:c3:ae:be:59:4b:00:00:00:00:00:03Certificate

Key Usages

ee:07:2e:7d:d0:1e:e7:93:a1:ce:53:57:03:db:14:51:ff:92:b6:4f:6e:6e:90:64:9c:d5:a6:c8:10:fc:f8:e5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-mm-misc-l1-1-0

Exports

Exports

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 420B

33:00:00:06:ad:ac:dd:3c:98:83:5e:29:49:00:00:00:00:06:ad
Certificate

33:00:00:00:03:c6:f9:b4:c3:ae:be:59:4b:00:00:00:00:00:03
Certificate

ee:07:2e:7d:d0:1e:e7:93:a1:ce:53:57:03:db:14:51:ff:92:b6:4f:6e:6e:90:64:9c:d5:a6:c8:10:fc:f8:e5
Signer

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 420B