0f60a0304270d7ebff259e4d124c139152d4f7bdcebc967cdd8d9cf575c0d7e6_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0f60a0304270d7ebff259e4d124c139152d4f7bdcebc967cdd8d9cf575c0d7e6_NeikiAnalytics.exe
Size

856KB
MD5

4102e5acdfd3c8eb572768812f23b860
SHA1

2739e84f66c6ed6cea45f8a6fe97693b0c404637
SHA256

0f60a0304270d7ebff259e4d124c139152d4f7bdcebc967cdd8d9cf575c0d7e6
SHA512

c1f4de7f6339b41fd313a83a06e2791886d57ccab7478d7b33cc29beb83a64cbe02bac2ea86d033bdee6137817c2b93ec4141a2e9774f1d836cee78cc1e6fc86
SSDEEP

12288:ocEeL81m5u0m4/+ZUNTOeVqnuDmRMqJAAMbDWiKWm5ipfA2mAIgiTFNuQYV:gg8o5u6iUNTOeV+u4gDh7HpJmWmNu5V

Score

1^/10

Malware Config

Signatures

Files

0f60a0304270d7ebff259e4d124c139152d4f7bdcebc967cdd8d9cf575c0d7e6_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

f9191999f04e31f7466aaea3877ba7eb

Code Sign

25:1f:42:b6:aa:40:30:0e:2b:a1:bb:07:f7:40:18:3f
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

02/03/2023, 00:00

Not After

01/03/2026, 23:59

Subject

CN=Xerox Corporation,O=Xerox Corporation,ST=Connecticut,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

e8:cc:17:8e:b9:66:5b:fa:d8:0f:4e:a8:c9:5e:a7:75:5f:4a:da:d9
Signer

Actual PE Digest

e8:cc:17:8e:b9:66:5b:fa:d8:0f:4e:a8:c9:5e:a7:75:5f:4a:da:d9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
GetCurrentDirectoryA
WaitForSingleObject
GetFileAttributesA
GetOEMCP
GetComputerNameW
GetTickCount
GetACP
GetStringTypeW
GetStringTypeA
LoadLibraryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetCPInfo
CreateProcessA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
FlushFileBuffers
IsBadWritePtr
VirtualAlloc
SetStdHandle
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetProcAddress
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WideCharToMultiByte
HeapFree
HeapSize
GetLastError
SetFileTime
LocalFileTimeToFileTime
GetFullPathNameW
GetFullPathNameA
GetTempPathW
GetTempPathA
GetModuleFileNameW
DeleteFileW
DeleteFileA
SetFilePointer
GetFileAttributesW
CreateDirectoryW
SetCurrentDirectoryW
SetCurrentDirectoryA
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryA
SetFileAttributesA
GetExitCodeProcess
CreateFileA
Sleep
GetLocalTime
GetEnvironmentStrings
FreeEnvironmentStringsW
FormatMessageA
GetModuleFileNameA
CloseHandle
SetEndOfFile
ReadFile
WriteFile
GetFileSize
FileTimeToSystemTime
SystemTimeToFileTime
GetCurrentProcess
TerminateProcess
GetVersionExA
CreateFileW
GetCurrentThreadId
RtlUnwind
ExitProcess
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetTimeZoneInformation

user32

GetMessageA
RegisterClassExW
PostMessageA
SetTimer
GetDlgItemTextA
LoadStringA
DefWindowProcA
DestroyWindow
BeginPaint
EndPaint
GetDlgItemTextW
SetWindowTextW
MoveWindow
SetDlgItemTextW
EnableWindow
SetDlgItemTextA
EndDialog
PostQuitMessage
MessageBoxW
GetDesktopWindow
GetWindowRect
CopyRect
OffsetRect
SetWindowPos
CreateWindowExW
DialogBoxParamW
LoadCursorA
LoadStringW
TranslateMessage
DispatchMessageA
MessageBoxA
SendMessageA
GetDlgItem

shell32

ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc

advapi32

CryptReleaseContext
CryptGenRandom
GetUserNameA
CryptAcquireContextA

Sections

.text
Size: 272KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f9191999f04e31f7466aaea3877ba7eb

Code Sign

25:1f:42:b6:aa:40:30:0e:2b:a1:bb:07:f7:40:18:3fCertificate

Extended Key Usages

Key Usages

e8:cc:17:8e:b9:66:5b:fa:d8:0f:4e:a8:c9:5e:a7:75:5f:4a:da:d9Signer

Headers

File Characteristics

Imports

kernel32

user32

shell32

advapi32

Sections

.text Size: 272KB - Virtual size: 268KB

.rdata Size: 40KB - Virtual size: 38KB

.data Size: 80KB - Virtual size: 93KB

.rsrc Size: 56KB - Virtual size: 55KB

25:1f:42:b6:aa:40:30:0e:2b:a1:bb:07:f7:40:18:3f
Certificate

e8:cc:17:8e:b9:66:5b:fa:d8:0f:4e:a8:c9:5e:a7:75:5f:4a:da:d9
Signer

.text
Size: 272KB - Virtual size: 268KB

.rdata
Size: 40KB - Virtual size: 38KB

.data
Size: 80KB - Virtual size: 93KB

.rsrc
Size: 56KB - Virtual size: 55KB