1da0847a6272684b433c93835236611e89e43c33e4ea8bf148a5da011f8ece9b_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

1da0847a6272684b433c93835236611e89e43c33e4ea8bf148a5da011f8ece9b_NeikiAnalytics.exe
Size

171KB
MD5

ea7d31f836e16cddb17ad2e562c8d510
SHA1

6a13f33768f53716d0d71319e91cbddbc6ba005c
SHA256

1da0847a6272684b433c93835236611e89e43c33e4ea8bf148a5da011f8ece9b
SHA512

6253cc5aff4ff24a5737ace180c1273f730b28d34dea3af3a76fe8f92254825c73cb84ebaaea5c6114acb249ce514f72aab521e4f88d66bc68e08a68c80fb261
SSDEEP

3072:0DsJIJC+DM1Sm2PcSXub08IwcYZozSYk+7lmAIZ:0DsKJC+DMX2USX80cTmzSpMmD

Score

1^/10

Malware Config

Signatures

Files

1da0847a6272684b433c93835236611e89e43c33e4ea8bf148a5da011f8ece9b_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

17:3c:ec:b6:e7:77:b8:ca:25:0c:77:67
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

15/02/2023, 03:11

Not After

15/02/2026, 03:11

Subject

SERIALNUMBER=9131011434217342X2,CN=Shanghai Lilith Network Technology Co.\, Ltd.,O=Shanghai Lilith Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

06/04/2022, 07:45

Not After

08/05/2033, 07:45

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

eb:da:90:11:78:ab:09:4c:71:b0:6d:60:c0:32:13:15:55:9b:a2:13:3b:35:41:9d:75:5d:91:f2:52:2a:59:ea
Signer

Actual PE Digest

eb:da:90:11:78:ab:09:4c:71:b0:6d:60:c0:32:13:15:55:9b:a2:13:3b:35:41:9d:75:5d:91:f2:52:2a:59:ea

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

0e8ad76015b3cb6078bf3dae36f7d11c
164a9957f2c75e5d4b481d1ceff90393
1998da082e6413092f0e7bcd5a0e9331
2434a4c10d01dbab5e7438b2b580d1d1
26c6d10914da2fc98755b3533c59141e
276b96e48754d7f5ba865bd7f5b37c11
28ed2507e7c32c0ff11ee473d30002ba
3153aaaae8fc434381cfb3ebac4ac67f
34e8fec66b799db60cf2f2f751c3bdd9
36a800eeeae3c643da5520fa383c8c70
4056efdff1ca3cfb9835e73527987069
428d454056b9288c93f4435d6e6f7fda
478bf3abafa12cba2083fb45bca79b9c
4a1dc7df3f09b836e86a41d0d8fb4229
56916a4274b32248f9469fc9aed57cca
59142aef52ef9b6ab273da58974494a1
670478f3fb3f285eeace534fbe61a03e
67f7899d245d8335136c9989ff56ffb9
68a8ea65a4f1ea752d1138be3be73a9a
6d4092136d177f009f0d459c6a5dbfef
74859440b57103f2ad0ed7a7ed6cb126
77fc393cb521ac129b1392d4eb94d29a
79d025850360dd98864bde637bf10bbf
7f3cdd09f595be9d581c145c84091a8f
831cc8b1ff0643079c9f67e8c4b33bc6
83fa0242f750765957590f2a4259cfb5
89425a97f3f500fa810ad03f0c382542
8a623cf52267d6534a5887bde1664092
8c2be93e18276203cbd918daa2748a10
93df17b7366cd622dfa5ea2d3c75cf0b
959783104064e8c81fba5d33d94ead01
9707ed4972d13b890b835042409a6acd
9a5e6b66ecfd9e010183b290b2be0368
9c6927b98675eff8101ece39bb100dd4
a012583502bbf00a4fbd842e6d970534
a607d393534fa54308aa3c3f4a89c98f
aa309157da5950aa53ed6075709e6e40
aa7541ff202784bfb27c65e3a3b68e2b
ae882f31d3d5cf06bcc065e08e154266
b04c75a68edf1d166f6547f2ea0e8928
b78f808503c8b5fe97a83e833bd5871d
b801038cc2dd712e8d9232e0a115b50a
baf840f8150b604b0fd300ceb19dd50e
burst.initialize
ca60ab232d19a9f4380a530fa0d222cf
cf20d690c33ab495d44c548cd6a31428
cffa48c5197201146f518b0ede4669c5
d23a07cb3c3f217121d5bf94e76674f0
d9f2d41626f5efcba727d5c8b91eeb34
da352d92cabf024fc9986011d52a4537
e046a1595d0148509657ed4dbcb52a86
e943843acfb78f5f2f3716a6553740d9
efcb9558521fe78fc772c93a45d55642
f7daf29273ab2f86d86c27c3a1d6eeb5

Sections

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

17:3c:ec:b6:e7:77:b8:ca:25:0c:77:67Certificate

Extended Key Usages

Key Usages

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6aCertificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

eb:da:90:11:78:ab:09:4c:71:b0:6d:60:c0:32:13:15:55:9b:a2:13:3b:35:41:9d:75:5d:91:f2:52:2a:59:eaSigner

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 143KB - Virtual size: 142KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 4KB - Virtual size: 4KB

.pdata Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 16B

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

17:3c:ec:b6:e7:77:b8:ca:25:0c:77:67
Certificate

01:b2:8b:d4:cf:ee:ee:0d:be:d0:b3:0d:9b:f8:43:6a
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

eb:da:90:11:78:ab:09:4c:71:b0:6d:60:c0:32:13:15:55:9b:a2:13:3b:35:41:9d:75:5d:91:f2:52:2a:59:ea
Signer

.text
Size: 143KB - Virtual size: 142KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 4KB - Virtual size: 4KB

.pdata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 16B