c:\Users\Ricardo\Desktop\Base Woode Update 3\Debug\Paradox.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6a73760ee96077d910ddf2de921d5cf0_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6a73760ee96077d910ddf2de921d5cf0_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
6a73760ee96077d910ddf2de921d5cf0_NeikiAnalytics
-
Size
51KB
-
MD5
6a73760ee96077d910ddf2de921d5cf0
-
SHA1
ea10c62d0dc3e885f5ba01ddf261c6606c56e03c
-
SHA256
3b7fcd18be598aecd79f624ac1e7c8e83805fa10398bb7c3719cbaf5335ba032
-
SHA512
7358c2dde742a56ba221213700c03b6e7c7962def24c169f8196f9b265bec78a054dbb749c845dc454511aa0e98491f9b4c808ac1342b803df674d3814a7ed1f
-
SSDEEP
384:2hdBXKR4l1JvvDNFmeKy8H4cu4MAMqVBv2uwP+5qUp8v7wUbge5dI44qKQH4:KdntKy8Ycu4Kqzaa/p88UNEQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6a73760ee96077d910ddf2de921d5cf0_NeikiAnalytics
Files
-
6a73760ee96077d910ddf2de921d5cf0_NeikiAnalytics.dll windows:5 windows x86 arch:x86
0119c8b3d2647b443c509cf0e1349bbb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
VirtualProtect
ExitProcess
GetModuleHandleA
Sleep
CreateThread
DisableThreadLibraryCalls
VirtualQuery
GetModuleFileNameW
GetProcessHeap
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LoadLibraryA
GetProcAddress
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
DebugBreak
RaiseException
IsDebuggerPresent
InterlockedCompareExchange
InterlockedExchange
FreeLibrary
user32
GetAsyncKeyState
GetSystemMetrics
SetRect
MessageBoxA
GetCursorPos
d3dx9_43
D3DXCreateFontA
D3DXCreateLine
msvcr90d
_decode_pointer
_CrtSetCheckCount
_initterm
_initterm_e
_encoded_null
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_free_dbg
_malloc_dbg
_encode_pointer
_CRT_RTC_INITW
??2@YAPAXI@Z
vsprintf_s
malloc
system
memset
memcpy
sqrt
atan2
sin
cos
strlen
_amsg_exit
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ