a70900719f8e888f153eb2f0f9fa82407ddf935a082cc0734d1ef142e96cbc37_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

a70900719f8e888f153eb2f0f9fa82407ddf935a082cc0734d1ef142e96cbc37_NeikiAnalytics.exe
Size

19KB
MD5

ecaa6a8ef86f8b8c3c733458031107b0
SHA1

7586049b716e33c39b887ef6bc960f193a3ad726
SHA256

a70900719f8e888f153eb2f0f9fa82407ddf935a082cc0734d1ef142e96cbc37
SHA512

1f9f96b535ff02eb3a22147bd016f39f635b325f3297eb969e8c2a0d94e2c20177c3522bf19c92cfe4c749219bf81a34a5f867f677d9ace2947e76810db1d4af
SSDEEP

192:cftIrrkYjYbh9wFS1zRNp/3glEKebdnK37225orS1eDPc8gwBjtlAGFuasnZHQ:ICrrkYjYbh6FS1zRj4QuOUGMPnhQ

Score

1^/10

Malware Config

Signatures

Files

a70900719f8e888f153eb2f0f9fa82407ddf935a082cc0734d1ef142e96cbc37_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

Code Sign

39:9d:cc:ba:df:3c:2c:fe:42:e1:f9:79:c6:a2:d4:f1
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

01/02/2018, 00:00

Not After

01/04/2020, 23:59

Subject

CN=Siemens AG,O=Siemens AG,L=Karlsruhe,ST=Baden-Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

61:19:93:e4:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/02/2011, 19:25

Not After

22/02/2021, 19:35

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

17:53:00:4d:8a:c6:c2:9f:be:09:07:d4:2b:4a:fe:7c:72:06:b6:66:80:ae:e7:d1:99:ad:0f:3a:76:b0:a7:4c
Signer

Actual PE Digest

17:53:00:4d:8a:c6:c2:9f:be:09:07:d4:2b:4a:fe:7c:72:06:b6:66:80:ae:e7:d1:99:ad:0f:3a:76:b0:a7:4c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\1207\13938\Binaries\x64\Release\__bin\almpgiscp3xres.pdb

Sections

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

39:9d:cc:ba:df:3c:2c:fe:42:e1:f9:79:c6:a2:d4:f1Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

61:19:93:e4:00:00:00:00:00:1cCertificate

Key Usages

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

17:53:00:4d:8a:c6:c2:9f:be:09:07:d4:2b:4a:fe:7c:72:06:b6:66:80:ae:e7:d1:99:ad:0f:3a:76:b0:a7:4cSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.rdata Size: 512B - Virtual size: 272B

.rsrc Size: 10KB - Virtual size: 9KB

39:9d:cc:ba:df:3c:2c:fe:42:e1:f9:79:c6:a2:d4:f1
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

61:19:93:e4:00:00:00:00:00:1c
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

17:53:00:4d:8a:c6:c2:9f:be:09:07:d4:2b:4a:fe:7c:72:06:b6:66:80:ae:e7:d1:99:ad:0f:3a:76:b0:a7:4c
Signer

.rdata
Size: 512B - Virtual size: 272B

.rsrc
Size: 10KB - Virtual size: 9KB