4e137d2d60d38c276f8067f645362c19a7e1cf8541a0bced4327f6b60cb75a05_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

4e137d2d60d38c276f8067f645362c19a7e1cf8541a0bced4327f6b60cb75a05_NeikiAnalytics.exe
Size

50KB
MD5

bab762f70fd2121dedcd7b11b4f73b70
SHA1

0fcb65f00d47f323ba8a6506ee832eaf5a0717a4
SHA256

4e137d2d60d38c276f8067f645362c19a7e1cf8541a0bced4327f6b60cb75a05
SHA512

7bfdf42b6a19e9cddb99bd843efa0507d03bbd343cc69cb49651723a047e53d6fbbc61b5b4ada7b62e98c2794d532308c53e4e83e82834a38f48c192605e8b43
SSDEEP

768:yqOlXXsi1zOrPLAKYlooAn6f6e9Pi7YiYBNzU:yB5Xt1zOp6f6e9Pi77eU

Score

1^/10

Malware Config

Signatures

Files

4e137d2d60d38c276f8067f645362c19a7e1cf8541a0bced4327f6b60cb75a05_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

2185687c9d525dfae2dabc306b5c4b42

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:72:4a:5a:37:5a:2b:01:3a:1e:4b:6c:60:a7:c2:e5
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

23/07/2021, 00:00

Not After

24/07/2024, 23:59

Subject

CN=NVIDIA Corporation,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

38:63:de:f8
Certificate

Issuer

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Not Before

24/12/1999, 17:50

Not After

24/07/2029, 14:15

Subject

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

58:da:13:ff:00:00:00:00:51:ce:0d:f7
Certificate

Issuer

CN=Entrust.net Certification Authority (2048),OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.)+OU=(c) 1999 Entrust.net Limited,O=Entrust.net

Not Before

22/07/2015, 19:02

Not After

22/06/2029, 19:32

Subject

CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

07:d7:13:53:da:25:61:b4:61:e9:90:47:8a:4c:ce:04
Certificate

Issuer

CN=Entrust Timestamping CA - TS1,OU=See www.entrust.net/legal-terms+OU=(c) 2015 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

19/01/2024, 16:46

Not After

01/06/2029, 00:00

Subject

CN=Entrust Timestamp Authority - TSA1,O=Entrust\, Inc.,L=Ottawa,ST=Ontario,C=CA

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

9b:89:56:d8:b8:c9:1c:a5:0d:c0:29:76:6e:e5:2a:b0:48:c9:2b:0a:71:6d:00:61:ca:30:fc:88:fe:f3:66:17
Signer

Actual PE Digest

9b:89:56:d8:b8:c9:1c:a5:0d:c0:29:76:6e:e5:2a:b0:48:c9:2b:0a:71:6d:00:61:ca:30:fc:88:fe:f3:66:17

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

W:\ac88d7d902b57417\_build\py310.windows-x86_64.nv-usd.release\USD\pxr\usd\usdProc\Release\usdProc.pdb

Imports

usdgeom

?GetSchemaAttributeNames@UsdGeomBoundable@pxrInternal_v0_22__pxrReserved__@@SAAEBV?$vector@VTfToken@pxrInternal_v0_22__pxrReserved__@@V?$allocator@VTfToken@pxrInternal_v0_22__pxrReserved__@@@std@@@std@@_N@Z
??1UsdGeomBoundable@pxrInternal_v0_22__pxrReserved__@@UEAA@XZ

usd

??0UsdSchemaBase@pxrInternal_v0_22__pxrReserved__@@QEAA@AEBVUsdPrim@1@@Z
?_IsCompatible@UsdTyped@pxrInternal_v0_22__pxrReserved__@@MEBA_NXZ
?_CreateAttr@UsdSchemaBase@pxrInternal_v0_22__pxrReserved__@@IEBA?AVUsdAttribute@2@AEBVTfToken@2@AEBVSdfValueTypeName@2@_NW4SdfVariability@2@AEBVVtValue@2@2@Z
?GetAttribute@UsdPrim@pxrInternal_v0_22__pxrReserved__@@QEBA?AVUsdAttribute@2@AEBVTfToken@2@@Z
?DefinePrim@UsdStage@pxrInternal_v0_22__pxrReserved__@@QEAA?AVUsdPrim@2@AEBVSdfPath@2@AEBVTfToken@2@@Z
?GetPrimAtPath@UsdStage@pxrInternal_v0_22__pxrReserved__@@QEBA?AVUsdPrim@2@AEBVSdfPath@2@@Z
??1Usd_PrimData@pxrInternal_v0_22__pxrReserved__@@AEAA@XZ

sdf

?_RemovePathTokenFromTable@Sdf_PathNode@pxrInternal_v0_22__pxrReserved__@@IEBAXXZ
??3Sdf_PrimPartPathNode@pxrInternal_v0_22__pxrReserved__@@SAXPEAX@Z
??3Sdf_PropPartPathNode@pxrInternal_v0_22__pxrReserved__@@SAXPEAX@Z
??1Sdf_PrimPathNode@pxrInternal_v0_22__pxrReserved__@@AEAA@XZ
??1Sdf_PrimPropertyPathNode@pxrInternal_v0_22__pxrReserved__@@AEAA@XZ
??1Sdf_PrimVariantSelectionNode@pxrInternal_v0_22__pxrReserved__@@AEAA@XZ
??1Sdf_TargetPathNode@pxrInternal_v0_22__pxrReserved__@@AEAA@XZ
??1Sdf_RelationalAttributePathNode@pxrInternal_v0_22__pxrReserved__@@AEAA@XZ
??1Sdf_MapperPathNode@pxrInternal_v0_22__pxrReserved__@@AEAA@XZ
??1Sdf_MapperArgPathNode@pxrInternal_v0_22__pxrReserved__@@AEAA@XZ
??1Sdf_ExpressionPathNode@pxrInternal_v0_22__pxrReserved__@@AEAA@XZ
??1Sdf_ValueTypeNamesType@pxrInternal_v0_22__pxrReserved__@@QEAA@XZ
?New@_Init@Sdf_ValueTypeNamesType@pxrInternal_v0_22__pxrReserved__@@SAPEBV23@XZ
?_regionStarts@?$Sdf_Pool@USdf_PathPrimTag@pxrInternal_v0_22__pxrReserved__@@$0BI@$07$0EAAA@@pxrInternal_v0_22__pxrReserved__@@0PAPEADA
?SdfValueTypeNames@pxrInternal_v0_22__pxrReserved__@@3V?$TfStaticData@$$CBVSdf_ValueTypeNamesType@pxrInternal_v0_22__pxrReserved__@@U_Init@12@@1@A

tf

?_PossiblyDestroyRep@TfToken@pxrInternal_v0_22__pxrReserved__@@AEBAXXZ
??0TfToken@pxrInternal_v0_22__pxrReserved__@@QEAA@PEBD@Z
?Add@Tf_RegistryInit@pxrInternal_v0_22__pxrReserved__@@SAXPEBDP6AXPEAX1@Z0@Z
?Tf_RegistryInitDtor@pxrInternal_v0_22__pxrReserved__@@YAXPEBD@Z
?Tf_RegistryInitCtor@pxrInternal_v0_22__pxrReserved__@@YAXPEBD@Z
?GetInstance@TfScriptModuleLoader@pxrInternal_v0_22__pxrReserved__@@SAAEAV12@XZ
?RegisterLibrary@TfScriptModuleLoader@pxrInternal_v0_22__pxrReserved__@@QEAAXAEBVTfToken@2@0AEBV?$vector@VTfToken@pxrInternal_v0_22__pxrReserved__@@V?$allocator@VTfToken@pxrInternal_v0_22__pxrReserved__@@@std@@@std@@@Z
?Tf_PostNullSmartPtrDereferenceFatalError@pxrInternal_v0_22__pxrReserved__@@YAXAEBVTfCallContext@1@PEBD@Z
?Tf_PostErrorHelper@pxrInternal_v0_22__pxrReserved__@@YAXAEBVTfCallContext@1@W4TfDiagnosticType@1@PEBDZZ
?Tf_FailedVerifyHelper@pxrInternal_v0_22__pxrReserved__@@YA_NAEBVTfCallContext@1@PEBD1@Z
?_Begin@Auto@TfMallocTag@pxrInternal_v0_22__pxrReserved__@@AEAAXPEBD@Z
?_End@Auto@TfMallocTag@pxrInternal_v0_22__pxrReserved__@@AEAAXXZ
?GetCanonicalTypeName@TfType@pxrInternal_v0_22__pxrReserved__@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVtype_info@@@Z
?Declare@TfType@pxrInternal_v0_22__pxrReserved__@@SAAEBV12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Declare@TfType@pxrInternal_v0_22__pxrReserved__@@SAAEBV12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$vector@VTfType@pxrInternal_v0_22__pxrReserved__@@V?$allocator@VTfType@pxrInternal_v0_22__pxrReserved__@@@std@@@4@P6AXV12@@Z@Z
?AddAlias@TfType@pxrInternal_v0_22__pxrReserved__@@QEBAXV12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?_AddCppCastFunc@TfType@pxrInternal_v0_22__pxrReserved__@@AEBAXAEBVtype_info@@P6APEAXPEAX_N@Z@Z
?_DefineCppType@TfType@pxrInternal_v0_22__pxrReserved__@@AEBAXAEBVtype_info@@_K_N2@Z
?_FindByTypeid@TfType@pxrInternal_v0_22__pxrReserved__@@CAAEBV12@AEBVtype_info@@@Z
?_doTagging@TfMallocTag@pxrInternal_v0_22__pxrReserved__@@0_NA
??0TfToken@pxrInternal_v0_22__pxrReserved__@@QEAA@PEBDW4_ImmortalTag@01@@Z

arch

??1Arch_ConstructorInit@pxrInternal_v0_22__pxrReserved__@@QEAA@XZ
??0Arch_ConstructorInit@pxrInternal_v0_22__pxrReserved__@@QEAA@XZ

python310

_Py_NoneStruct
_Py_Dealloc

boost_python310-vc142-mt-x64-1_76

?lookup@registry@converter@python@boost@@YAAEBUregistration@234@Utype_info@34@@Z

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_name
__current_exception
__current_exception_context
__C_specific_handler
__std_type_info_destroy_list
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_initialize_narrow_environment
terminate
_initialize_onexit_table
_cexit
_execute_onexit_table
_crt_atexit
_configure_narrow_argv
_initterm_e
_invalid_parameter_noinfo_noreturn
_initterm
_register_onexit_function

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

kernel32

RtlLookupFunctionEntry
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
CloseHandle
RtlCaptureContext
InitializeSListHead
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection

Exports

Exports

??0UsdProcTokensType@pxrInternal_v0_22__pxrReserved__@@QEAA@XZ
??1UsdProcGenerativeProcedural@pxrInternal_v0_22__pxrReserved__@@UEAA@XZ
?CreateProceduralSystemAttr@UsdProcGenerativeProcedural@pxrInternal_v0_22__pxrReserved__@@QEBA?AVUsdAttribute@2@AEBVVtValue@2@_N@Z
?Define@UsdProcGenerativeProcedural@pxrInternal_v0_22__pxrReserved__@@SA?AV12@AEBV?$TfWeakPtr@VUsdStage@pxrInternal_v0_22__pxrReserved__@@@2@AEBVSdfPath@2@@Z
?Get@UsdProcGenerativeProcedural@pxrInternal_v0_22__pxrReserved__@@SA?AV12@AEBV?$TfWeakPtr@VUsdStage@pxrInternal_v0_22__pxrReserved__@@@2@AEBVSdfPath@2@@Z
?GetProceduralSystemAttr@UsdProcGenerativeProcedural@pxrInternal_v0_22__pxrReserved__@@QEBA?AVUsdAttribute@2@XZ
?GetSchemaAttributeNames@UsdProcGenerativeProcedural@pxrInternal_v0_22__pxrReserved__@@SAAEBV?$vector@VTfToken@pxrInternal_v0_22__pxrReserved__@@V?$allocator@VTfToken@pxrInternal_v0_22__pxrReserved__@@@std@@@std@@_N@Z
?UsdProcTokens@pxrInternal_v0_22__pxrReserved__@@3V?$TfStaticData@UUsdProcTokensType@pxrInternal_v0_22__pxrReserved__@@U?$Tf_StaticDataDefaultFactory@UUsdProcTokensType@pxrInternal_v0_22__pxrReserved__@@@2@@1@A
?_GetSchemaKind@UsdProcGenerativeProcedural@pxrInternal_v0_22__pxrReserved__@@MEBA?AW4UsdSchemaKind@2@XZ
?_GetStaticTfType@UsdProcGenerativeProcedural@pxrInternal_v0_22__pxrReserved__@@CAAEBVTfType@2@XZ
?_GetTfType@UsdProcGenerativeProcedural@pxrInternal_v0_22__pxrReserved__@@EEBAAEBVTfType@2@XZ

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pxrctor
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2185687c9d525dfae2dabc306b5c4b42

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0d:72:4a:5a:37:5a:2b:01:3a:1e:4b:6c:60:a7:c2:e5Certificate

Extended Key Usages

Key Usages

38:63:de:f8Certificate

Key Usages

58:da:13:ff:00:00:00:00:51:ce:0d:f7Certificate

Extended Key Usages

Key Usages

07:d7:13:53:da:25:61:b4:61:e9:90:47:8a:4c:ce:04Certificate

Extended Key Usages

Key Usages

9b:89:56:d8:b8:c9:1c:a5:0d:c0:29:76:6e:e5:2a:b0:48:c9:2b:0a:71:6d:00:61:ca:30:fc:88:fe:f3:66:17Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

usdgeom

usd

sdf

tf

arch

python310

boost_python310-vc142-mt-x64-1_76

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 1KB - Virtual size: 2KB

.pdata Size: 1KB - Virtual size: 1KB

.pxrctor Size: 512B - Virtual size: 32B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 260B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0d:72:4a:5a:37:5a:2b:01:3a:1e:4b:6c:60:a7:c2:e5
Certificate

38:63:de:f8
Certificate

58:da:13:ff:00:00:00:00:51:ce:0d:f7
Certificate

07:d7:13:53:da:25:61:b4:61:e9:90:47:8a:4c:ce:04
Certificate

9b:89:56:d8:b8:c9:1c:a5:0d:c0:29:76:6e:e5:2a:b0:48:c9:2b:0a:71:6d:00:61:ca:30:fc:88:fe:f3:66:17
Signer

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 1KB - Virtual size: 2KB

.pdata
Size: 1KB - Virtual size: 1KB

.pxrctor
Size: 512B - Virtual size: 32B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 260B