467c8dd6f3f8b1cb708fdda9c345a5945e7ff4cea9168d9c38ee32002ea05e68_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

467c8dd6f3f8b1cb708fdda9c345a5945e7ff4cea9168d9c38ee32002ea05e68_NeikiAnalytics.exe
Size

12KB
MD5

e3e45f9e3d202d6412996e0e9b5ddf90
SHA1

2c3c6f69c57ab28ed76b82d3bad6f7bbee0a0ae4
SHA256

467c8dd6f3f8b1cb708fdda9c345a5945e7ff4cea9168d9c38ee32002ea05e68
SHA512

15611af9bb4f03fe09774a9a258817295e0b219eba241147aca86ccc1e573174de39ba6a36164b1a0f898a0e834d3d75ffbc4832f16b45706161ae890f6a5bac
SSDEEP

384:QW7hWH/u2WuFR8Iuev6Po/Wpq8JN77hhhP:VZ2T2Ifg8M3hnP

Score

1^/10

Malware Config

Signatures

Files

467c8dd6f3f8b1cb708fdda9c345a5945e7ff4cea9168d9c38ee32002ea05e68_NeikiAnalytics.exe
.dll windows:10 windows x86 arch:x86

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:fd:58:af:05:6f:7d:ee:6d:25:5b:a2
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

30/06/2023, 06:16

Not After

26/09/2026, 06:16

Subject

CN=FonePaw Technology Limited,O=FonePaw Technology Limited,L=Central and Western,ST=Hong Kong Island,C=HK,1.2.840.113549.1.9.1=#0c13737570706f727440666f6e657061772e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

b4:e8:d9:f9:21:9c:24:71:f6:b1:9d:5e:01:ba:a8:38:d9:2d:27:33:49:0d:b6:ca:05:d5:11:0e:bb:d0:f8:0e
Signer

Actual PE Digest

b4:e8:d9:f9:21:9c:24:71:f6:b1:9d:5e:01:ba:a8:38:d9:2d:27:33:49:0d:b6:ca:05:d5:11:0e:bb:d0:f8:0e

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-file-l2-1-0.pdb

Exports

Exports

CopyFile2
CopyFileExW
CreateDirectoryExW
CreateHardLinkW
CreateSymbolicLinkW
GetFileInformationByHandleEx
MoveFileExW
MoveFileWithProgressW
ReOpenFile
ReadDirectoryChangesW
ReplaceFileW

Sections

.text
Size: 1024B - Virtual size: 925B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

03:fd:58:af:05:6f:7d:ee:6d:25:5b:a2Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

b4:e8:d9:f9:21:9c:24:71:f6:b1:9d:5e:01:ba:a8:38:d9:2d:27:33:49:0d:b6:ca:05:d5:11:0e:bb:d0:f8:0eSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Exports

Exports

Sections

.text Size: 1024B - Virtual size: 925B

.rsrc Size: 1024B - Virtual size: 1024B

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

03:fd:58:af:05:6f:7d:ee:6d:25:5b:a2
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

b4:e8:d9:f9:21:9c:24:71:f6:b1:9d:5e:01:ba:a8:38:d9:2d:27:33:49:0d:b6:ca:05:d5:11:0e:bb:d0:f8:0e
Signer

.text
Size: 1024B - Virtual size: 925B

.rsrc
Size: 1024B - Virtual size: 1024B