C:\Jenkins\workspace\uild-acceptance_build-0.102-FBDQLMZDPUNHZ76IK42UWFUL2W3JJHIA6HPDVFLSTINH6PH5VGXA\build_acceptance\clamav-0.102.0-beta\win32\Win32\Release\clamdscan.pdb
Static task
static1
Behavioral task
behavioral1
Sample
87f80719557f75189b36d3283f1c3540_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
87f80719557f75189b36d3283f1c3540_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
87f80719557f75189b36d3283f1c3540_NeikiAnalytics
-
Size
46KB
-
MD5
87f80719557f75189b36d3283f1c3540
-
SHA1
54d242de3a0281fa434c346aee1bbbc1361ad527
-
SHA256
59b0e59cbf5eaaa3493445b8098f8207951ebb20d206a1af1961df005572711d
-
SHA512
c5836a782b5e937635803883268f4b264c6228312f15d7f59bf6495439d7f31f23c3b71148d165ac9af30fa651d6adc0083265113d45277d8cef2481b1538c64
-
SSDEEP
768:6yM5skPofkuKpCGKCfWl4oG9gSYiTMYfobpm6UP6PG3EEoL9U:uyUuGwp4nw06+6CVoZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87f80719557f75189b36d3283f1c3540_NeikiAnalytics
Files
-
87f80719557f75189b36d3283f1c3540_NeikiAnalytics.exe windows:6 windows x86 arch:x86
81d43315df40fb29c1f6d19b243e693a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
htonl
__WSAFDIsSet
htons
kernel32
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
CopyFileA
MoveFileA
MultiByteToWideChar
GetLastError
WideCharToMultiByte
IsProcessorFeaturePresent
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
UnhandledExceptionFilter
libclamav
ord44275
ord44288
ord44297
ord44209
ord44298
ord44221
ord44207
ord44337
ord44339
ord44327
ord44208
ord44206
ord44331
ord44321
ord44324
ord44334
ord44333
ord44271
ord44286
ord44283
ord44284
ord44285
ord44329
ord44341
ord44330
vcruntime140
memset
memchr
memmove
_except_handler4_common
strrchr
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_errno
__p___argv
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_register_onexit_function
_controlfp_s
_cexit
_initterm_e
_c_exit
_initialize_onexit_table
_exit
terminate
_set_app_type
_seh_filter_exe
__p___argc
exit
_register_thread_local_exe_atexit_callback
api-ms-win-crt-stdio-l1-1-0
fclose
fopen
__stdio_common_vsprintf
_fileno
_setmode
fflush
__acrt_iob_func
fgets
_getcwd
_set_fmode
_read
_close
_open
__stdio_common_vfprintf
__p__commode
api-ms-win-crt-time-l1-1-0
_time64
_localtime64_s
strftime
api-ms-win-crt-string-l1-1-0
strncmp
strncpy
_strdup
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
malloc
calloc
api-ms-win-crt-filesystem-l1-1-0
rename
_unlink
_umask
_fstat64i32
api-ms-win-crt-convert-l1-1-0
atoi
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ