c:\graphviz-ms\graphviz2\lib\ann\MS_Win32\dll\Debug\ANN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2a93ee69370e29e0b4c4a5bf94e6bae0_NeikiAnalytics.dll
Resource
win7-20240508-en
General
-
Target
2a93ee69370e29e0b4c4a5bf94e6bae0_NeikiAnalytics
-
Size
915KB
-
MD5
2a93ee69370e29e0b4c4a5bf94e6bae0
-
SHA1
13bb99a6f2c63f7d36b56e067bd2a1418c83de84
-
SHA256
60f7c1e30aece8d400f8bb57af574bb487780db8265a9c1800ccb5b991a66be0
-
SHA512
23623f11ed682164bd5b46c3d5b9c347b7b7b6e8ea0160ac346169d4453a1274b9955f7dd9a8446508239671a21513ae62eb1d9049314186c20c3f0bdec54f22
-
SSDEEP
12288:KVfcW71uM7njC0sfeAgGWWRXSldDMYuXDHDLenG+34+oNYvOkw/4i4zYAkhdts57:KN5Ru00ehiRil2Y2DjEo3WngWz0/ts9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a93ee69370e29e0b4c4a5bf94e6bae0_NeikiAnalytics
Files
-
2a93ee69370e29e0b4c4a5bf94e6bae0_NeikiAnalytics.dll windows:5 windows x86 arch:x86
a712fec8584b0165f616febe186def20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
InterlockedCompareExchange
GetModuleHandleW
GetProcAddress
ExitProcess
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCurrentThreadId
GetCommandLineA
HeapValidate
IsBadReadPtr
GetCPInfo
LCMapStringA
GetLastError
LCMapStringW
GetModuleFileNameA
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
FatalAppExitA
DebugBreak
lstrlenA
LoadLibraryA
GetModuleHandleA
GetACP
GetOEMCP
IsValidCodePage
SetConsoleCtrlHandler
FreeLibrary
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
LoadLibraryW
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointer
FlushFileBuffers
CloseHandle
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
GetProcessHeap
VirtualQuery
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
GetTimeZoneInformation
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
Exports
Exports
??0ANNbd_tree@@QAE@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z
??0ANNbd_tree@@QAE@ABV0@@Z
??0ANNbd_tree@@QAE@HHH@Z
??0ANNbd_tree@@QAE@PAPANHHHW4ANNsplitRule@@W4ANNshrinkRule@@@Z
??0ANNbruteForce@@QAE@ABV0@@Z
??0ANNbruteForce@@QAE@PAPANHH@Z
??0ANNkd_tree@@QAE@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z
??0ANNkd_tree@@QAE@ABV0@@Z
??0ANNkd_tree@@QAE@HHH@Z
??0ANNkd_tree@@QAE@PAPANHHHW4ANNsplitRule@@@Z
??0ANNpointSet@@QAE@ABV0@@Z
??0ANNpointSet@@QAE@XZ
??0ANNsampStat@@QAE@XZ
??1ANNbd_tree@@UAE@XZ
??1ANNbruteForce@@UAE@XZ
??1ANNkd_tree@@UAE@XZ
??1ANNpointSet@@UAE@XZ
??4ANNbd_tree@@QAEAAV0@ABV0@@Z
??4ANNbruteForce@@QAEAAV0@ABV0@@Z
??4ANNkd_tree@@QAEAAV0@ABV0@@Z
??4ANNpointSet@@QAEAAV0@ABV0@@Z
??4ANNsampStat@@QAEAAV0@ABV0@@Z
??YANNsampStat@@QAEXN@Z
??_7ANNbd_tree@@6B@
??_7ANNbruteForce@@6B@
??_7ANNkd_tree@@6B@
??_7ANNpointSet@@6B@
??_FANNkd_tree@@QAEXXZ
?Dump@ANNkd_tree@@UAEXW4ANNbool@@AAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
?Print@ANNkd_tree@@UAEXW4ANNbool@@AAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
?SkeletonTree@ANNkd_tree@@IAEXHHHPAPANPAH@Z
?annAllocPt@@YAPANHN@Z
?annAllocPts@@YAPAPANHH@Z
?annClose@@YAXXZ
?annCopyPt@@YAPANHPAN@Z
?annDeallocPt@@YAXAAPAN@Z
?annDeallocPts@@YAXAAPAPAN@Z
?annDist@@YANHPAN0@Z
?annMaxPtsVisit@@YAXH@Z
?annPrintStats@@YAXW4ANNbool@@@Z
?annResetCounts@@YAXXZ
?annResetStats@@YAXH@Z
?annUpdateStats@@YAXXZ
?ann_average_err@@3VANNsampStat@@A
?ann_rank_err@@3VANNsampStat@@A
?annkFRSearch@ANNbruteForce@@UAEHPANNHPAH0N@Z
?annkFRSearch@ANNkd_tree@@UAEHPANNHPAH0N@Z
?annkPriSearch@ANNkd_tree@@QAEXPANHPAH0N@Z
?annkSearch@ANNbruteForce@@UAEXPANHPAH0N@Z
?annkSearch@ANNkd_tree@@UAEXPANHPAH0N@Z
?getStats@ANNkd_tree@@UAEXAAVANNkdStats@@@Z
?max@ANNsampStat@@QAENXZ
?mean@ANNsampStat@@QAENXZ
?min@ANNsampStat@@QAENXZ
?nPoints@ANNbruteForce@@UAEHXZ
?nPoints@ANNkd_tree@@UAEHXZ
?reset@ANNsampStat@@QAEXXZ
?samples@ANNsampStat@@QAEHXZ
?stdDev@ANNsampStat@@QAENXZ
?theDim@ANNbruteForce@@UAEHXZ
?theDim@ANNkd_tree@@UAEHXZ
?thePoints@ANNbruteForce@@UAEPAPANXZ
?thePoints@ANNkd_tree@@UAEPAPANXZ
Sections
.textbss Size: - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 561KB - Virtual size: 561KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 242KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ