5a9587fbdd8c7e380a4832f72fea2d58f93f76bcb2ae0f0d471857030373bcff_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5a9587fbdd8c7e380a4832f72fea2d58f93f76bcb2ae0f0d471857030373bcff_NeikiAnalytics.exe
Size

45KB
MD5

0c3d6735db72fedb44105f3e2fc25a70
SHA1

45e7d8b443bb3564d6f6f72b51242446945a26dc
SHA256

5a9587fbdd8c7e380a4832f72fea2d58f93f76bcb2ae0f0d471857030373bcff
SHA512

63d38095b6ab59a697cc2d0e617ec9a8a455490fa8dfc38f4dd11ced23cdff96580b6a7a085cfea9e431cfb2260663d129847dac31175e300a54a54813c312e3
SSDEEP

768:yto9SHpCSwNTlVc5OlcWJxlUJs3yJ6WTHkoaHDHf/ck8:0LJasOlcWx06WTHcjH

Score

1^/10

Malware Config

Signatures

Files

5a9587fbdd8c7e380a4832f72fea2d58f93f76bcb2ae0f0d471857030373bcff_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

d6210578e9c981f16f44152910b4a270

Code Sign

41:00:e9:1d:f7:96:98:42:b8:42:70:ff:52:c0:b9:f6
Certificate

Issuer

CN=carliv.eu

Not Before

03-01-2024 17:35

Not After

03-01-2034 17:35

Subject

CN=carliv.eu

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

07-11-2023 17:13

Not After

09-12-2034 17:13

Subject

CN=Globalsign TSA for CodeSign1 - R6 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20-06-2018 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10-12-2014 00:00

Not After

10-12-2034 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

02:94:71:50:42:00:97:1f:70:a5:99:fb:b8:dd:1f:99:a2:0d:ee:53:df:40:5a:7b:57:96:6c:5b:49:f2:4c:8c
Signer

Actual PE Digest

02:94:71:50:42:00:97:1f:70:a5:99:fb:b8:dd:1f:99:a2:0d:ee:53:df:40:5a:7b:57:96:6c:5b:49:f2:4c:8c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

PDB Paths

Imports

cygwin1

__cxa_atexit
__errno
__getreent
__main
_dll_crt0@0
_fopen64
_impure_ptr
basename
calloc
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
fclose
fopen
fprintf
fread
free
fseek
ftell
fwrite
malloc
posix_memalign
printf
putchar
puts
realloc
sscanf
strcasecmp
strcmp
strcpy
strerror
strtol
strtoul
unlink

kernel32

FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d6210578e9c981f16f44152910b4a270

Code Sign

41:00:e9:1d:f7:96:98:42:b8:42:70:ff:52:c0:b9:f6Certificate

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

02:94:71:50:42:00:97:1f:70:a5:99:fb:b8:dd:1f:99:a2:0d:ee:53:df:40:5a:7b:57:96:6c:5b:49:f2:4c:8cSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

cygwin1

kernel32

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 512B - Virtual size: 64B

.rdata Size: 5KB - Virtual size: 4KB

.buildid Size: 512B - Virtual size: 53B

.eh_fram Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 128KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 7KB - Virtual size: 7KB

41:00:e9:1d:f7:96:98:42:b8:42:70:ff:52:c0:b9:f6
Certificate

01:9b:ea:de:c8:4d:6b:8f:f7:6c:3a:9f:2e:01:24:16
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

02:94:71:50:42:00:97:1f:70:a5:99:fb:b8:dd:1f:99:a2:0d:ee:53:df:40:5a:7b:57:96:6c:5b:49:f2:4c:8c
Signer

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 512B - Virtual size: 64B

.rdata
Size: 5KB - Virtual size: 4KB

.buildid
Size: 512B - Virtual size: 53B

.eh_fram
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 128KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 7KB - Virtual size: 7KB