2dd0d6570985c3a9d6853122dc606a6513079f798037cb0307ebac78ff9600b2_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2dd0d6570985c3a9d6853122dc606a6513079f798037cb0307ebac78ff9600b2_NeikiAnalytics.exe
Size

22KB
MD5

51b28b9ca97f3b20c9555942b767ce40
SHA1

7b74d1ab1bf43bbe795a6bf474030f6db187f4c1
SHA256

2dd0d6570985c3a9d6853122dc606a6513079f798037cb0307ebac78ff9600b2
SHA512

bf63130d3bd1d3943e8b56c5bc8b0380064ad249f210e7fa6644b1a532679fe0ed2d1110e37873e36fdb03ecb1d5fbc003e31f30433b67bee873aa3eb4273b98
SSDEEP

384:jzQVWqhWipwKNsFJegaGoGCJEF8ZpHZOBc:jzQnuHqEFiRCc

Score

1^/10

Malware Config

Signatures

Files

2dd0d6570985c3a9d6853122dc606a6513079f798037cb0307ebac78ff9600b2_NeikiAnalytics.exe
.dll windows:10 windows x64 arch:x64

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

12:1c:77:48:63:e3:ba:8e:7b:8b:f7:55:97:87:47:ae
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

06/09/2022, 00:00

Not After

05/09/2025, 23:59

Subject

CN=BLACKBIRD SECURE BROWSING LTD,O=BLACKBIRD SECURE BROWSING LTD,ST=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6f:d0:a2:6b:10:3c:0c:21:0b:f3:56:57:40:c5:d0:22:3b:45:13:8e:97:40:98:f8:14:cf:f9:fa:da:9f:2b:7a
Signer

Actual PE Digest

6f:d0:a2:6b:10:3c:0c:21:0b:f3:56:57:40:c5:d0:22:3b:45:13:8e:97:40:98:f8:14:cf:f9:fa:da:9f:2b:7a

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-errorhandling-l1-1-0.pdb

Exports

Exports

GetErrorMode
GetLastError
RaiseException
SetErrorMode
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter

Sections

.rdata
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

12:1c:77:48:63:e3:ba:8e:7b:8b:f7:55:97:87:47:aeCertificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

6f:d0:a2:6b:10:3c:0c:21:0b:f3:56:57:40:c5:d0:22:3b:45:13:8e:97:40:98:f8:14:cf:f9:fa:da:9f:2b:7aSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.rdata Size: 4KB - Virtual size: 840B

.data Size: - Virtual size: 128B

.rsrc Size: 4KB - Virtual size: 1008B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

12:1c:77:48:63:e3:ba:8e:7b:8b:f7:55:97:87:47:ae
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

6f:d0:a2:6b:10:3c:0c:21:0b:f3:56:57:40:c5:d0:22:3b:45:13:8e:97:40:98:f8:14:cf:f9:fa:da:9f:2b:7a
Signer

.rdata
Size: 4KB - Virtual size: 840B

.data
Size: - Virtual size: 128B

.rsrc
Size: 4KB - Virtual size: 1008B