25cc12deabdc8cc2deceea55c7b6266974774e95bd773052b3da44465d9723cc_NeikiAnalytics[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

25cc12deabdc8cc2deceea55c7b6266974774e95bd773052b3da44465d9723cc_NeikiAnalytics.exe
Size

25KB
MD5

7576d894f7d63bb52800582b52372f40
SHA1

255a3ac2e1bad40174e8c5cfc36ad6712a5e50e6
SHA256

25cc12deabdc8cc2deceea55c7b6266974774e95bd773052b3da44465d9723cc
SHA512

3313d2c408089485d7921f2f6b2d0103a0076a1eb0783c1ce4a4a769e856b68a7971d89cd0fdbc2bd9cb959298664a40a3aa4a6ad6e59980947ca9aa1cb278df
SSDEEP

384:bK+xKfzQ2XFpOQGR9zos2clAKLHRN74u56/R9zZwu9905:W+xAUiXOQ69zbjlAAX5e9zI5

Score

1^/10

Malware Config

Signatures

Files

25cc12deabdc8cc2deceea55c7b6266974774e95bd773052b3da44465d9723cc_NeikiAnalytics.exe
.exe windows:4 windows x86 arch:x86

cc40fefa3af5cd00cc28dbd874038a4d

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:25

Not After

01-09-2022 18:25

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:33

Not After

01-09-2022 18:33

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:c0:11:b2:4f:e1:12:dd:e8:42:67:d9:71:26:ee:43:f2:8c:9a:81:a4:86:73:75:7f:7d:3c:3c:f8:b2:33:6d
Signer

Actual PE Digest

0c:c0:11:b2:4f:e1:12:dd:e8:42:67:d9:71:26:ee:43:f2:8c:9a:81:a4:86:73:75:7f:7d:3c:3c:f8:b2:33:6d

Digest Algorithm

sha256

PE Digest Matches

false

0c:c0:11:b2:4f:e1:12:dd:e8:42:67:d9:71:26:ee:43:f2:8c:9a:81:a4:86:73:75:7f:7d:3c:3c:f8:b2:33:6d
Signer

Actual PE Digest

0c:c0:11:b2:4f:e1:12:dd:e8:42:67:d9:71:26:ee:43:f2:8c:9a:81:a4:86:73:75:7f:7d:3c:3c:f8:b2:33:6d

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc

wininet

HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile

shell32

ShellExecuteW

ntdll

RtlDecompressBuffer
swprintf

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc40fefa3af5cd00cc28dbd874038a4d

Code Sign

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

0c:c0:11:b2:4f:e1:12:dd:e8:42:67:d9:71:26:ee:43:f2:8c:9a:81:a4:86:73:75:7f:7d:3c:3c:f8:b2:33:6dSigner

0c:c0:11:b2:4f:e1:12:dd:e8:42:67:d9:71:26:ee:43:f2:8c:9a:81:a4:86:73:75:7f:7d:3c:3c:f8:b2:33:6dSigner

Headers

File Characteristics

Imports

kernel32

wininet

shell32

ntdll

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

33:00:00:04:39:f6:1f:7a:67:6d:a0:00:af:00:00:00:00:04:39
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

33:00:00:02:55:18:1d:a4:2e:e0:86:fc:15:00:00:00:00:02:55
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

0c:c0:11:b2:4f:e1:12:dd:e8:42:67:d9:71:26:ee:43:f2:8c:9a:81:a4:86:73:75:7f:7d:3c:3c:f8:b2:33:6d
Signer

0c:c0:11:b2:4f:e1:12:dd:e8:42:67:d9:71:26:ee:43:f2:8c:9a:81:a4:86:73:75:7f:7d:3c:3c:f8:b2:33:6d
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB