c:\ade\jenkins\workspace\8-2-build-windows-i586-cygwin\jdk8u241\331\build\windows-i586\jdk\objs\libnet\net.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0125d3a2c7b733eaa14ef930b2a624e0_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0125d3a2c7b733eaa14ef930b2a624e0_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
General
-
Target
0125d3a2c7b733eaa14ef930b2a624e0_NeikiAnalytics
-
Size
295KB
-
MD5
0125d3a2c7b733eaa14ef930b2a624e0
-
SHA1
91228ff2198c3381ba01219f9fdd8eb97911a2b1
-
SHA256
582eede0fd8716ab3d32edf3ed03523eee887a22b2e2591a9492e384e4d1de59
-
SHA512
be9edcdd740a8018ad7f531c95a8a148f3b3fbab8699267c73760ab967493d44ce2672d0c802075563102b5a258a1e5e24121f66120715807ff20405e3555fe7
-
SSDEEP
6144:Ax1B0LoLXfKUsCW22okvUI1TvVme8ifcDM:6CkLyUsCKo8TvVHtc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0125d3a2c7b733eaa14ef930b2a624e0_NeikiAnalytics
Files
-
0125d3a2c7b733eaa14ef930b2a624e0_NeikiAnalytics.dll windows:5 windows x86 arch:x86
5527de03e03fb2c41232beb7e4c52a57
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ws2_32
WSAEventSelect
recvfrom
select
WSAIoctl
closesocket
setsockopt
socket
WSASetLastError
connect
ntohs
getsockname
sendto
ioctlsocket
__WSAFDIsSet
shutdown
WSASendDisconnect
WSAStartup
WSACleanup
getprotobyname
recv
getnameinfo
getaddrinfo
freeaddrinfo
bind
WSACreateEvent
WSAGetLastError
htons
WSACloseEvent
getsockopt
htonl
gethostbyaddr
ntohl
gethostbyname
gethostname
send
accept
listen
jvm
jio_snprintf
_JVM_InitializeSocketLibrary@0
_JVM_CurrentTimeMillis@8
java
_JNU_NewStringPlatform@8
_JNU_ThrowByNameWithMessageAndLastError@12
getErrorString
JDK_LoadSystemLibrary
_JNU_ThrowOutOfMemoryError@8
_JNU_ThrowByName@12
_JNU_ThrowByNameWithLastError@12
_JNU_ReleaseStringPlatformChars@12
_JNU_GetStringPlatformChars@12
_JNU_ThrowNullPointerException@8
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
msvcr100
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
strcat
wcscpy
_snprintf_s
strncpy_s
calloc
_lock
_onexit
_except_handler4_common
__dllonexit
__iob_func
fprintf
sscanf
strchr
strstr
sprintf
strcmp
strncmp
strtok
strlen
memset
free
malloc
strcpy
isspace
memcpy
_errno
realloc
wcslen
strncpy
kernel32
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
DecodePointer
EncodePointer
RaiseException
LoadLibraryA
GetLastError
InterlockedExchange
GetCurrentThreadId
LocalAlloc
InitializeCriticalSection
EnterCriticalSection
GetVersionExA
LeaveCriticalSection
GetOverlappedResult
MultiByteToWideChar
GetProcAddress
FormatMessageA
LocalFree
VerSetConditionMask
VerifyVersionInfoW
Sleep
SetHandleInformation
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
Exports
Exports
_JNI_OnLoad@8
_Java_java_net_DatagramPacket_init@8
_Java_java_net_DualStackPlainDatagramSocketImpl_dataAvailable@8
_Java_java_net_DualStackPlainDatagramSocketImpl_initIDs@8
_Java_java_net_DualStackPlainDatagramSocketImpl_socketBind@24
_Java_java_net_DualStackPlainDatagramSocketImpl_socketClose@12
_Java_java_net_DualStackPlainDatagramSocketImpl_socketConnect@20
_Java_java_net_DualStackPlainDatagramSocketImpl_socketCreate@12
_Java_java_net_DualStackPlainDatagramSocketImpl_socketDisconnect@12
_Java_java_net_DualStackPlainDatagramSocketImpl_socketGetIntOption@16
_Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalAddress@12
_Java_java_net_DualStackPlainDatagramSocketImpl_socketLocalPort@12
_Java_java_net_DualStackPlainDatagramSocketImpl_socketReceiveOrPeekData@28
_Java_java_net_DualStackPlainDatagramSocketImpl_socketSend@36
_Java_java_net_DualStackPlainDatagramSocketImpl_socketSetIntOption@20
_Java_java_net_DualStackPlainSocketImpl_accept0@16
_Java_java_net_DualStackPlainSocketImpl_available0@12
_Java_java_net_DualStackPlainSocketImpl_bind0@24
_Java_java_net_DualStackPlainSocketImpl_close0@12
_Java_java_net_DualStackPlainSocketImpl_configureBlocking@16
_Java_java_net_DualStackPlainSocketImpl_connect0@20
_Java_java_net_DualStackPlainSocketImpl_getIntOption@16
_Java_java_net_DualStackPlainSocketImpl_initIDs@8
_Java_java_net_DualStackPlainSocketImpl_listen0@16
_Java_java_net_DualStackPlainSocketImpl_localAddress@16
_Java_java_net_DualStackPlainSocketImpl_localPort0@12
_Java_java_net_DualStackPlainSocketImpl_sendOOB@16
_Java_java_net_DualStackPlainSocketImpl_setIntOption@20
_Java_java_net_DualStackPlainSocketImpl_shutdown0@16
_Java_java_net_DualStackPlainSocketImpl_socket0@16
_Java_java_net_DualStackPlainSocketImpl_waitForConnect@16
_Java_java_net_DualStackPlainSocketImpl_waitForNewConnection@16
_Java_java_net_Inet4AddressImpl_getHostByAddr@12
_Java_java_net_Inet4AddressImpl_getLocalHostName@8
_Java_java_net_Inet4AddressImpl_isReachable0@24
_Java_java_net_Inet4AddressImpl_lookupAllHostAddr@12
_Java_java_net_Inet4Address_init@8
_Java_java_net_Inet6AddressImpl_getHostByAddr@12
_Java_java_net_Inet6AddressImpl_getLocalHostName@8
_Java_java_net_Inet6AddressImpl_isReachable0@32
_Java_java_net_Inet6AddressImpl_lookupAllHostAddr@12
_Java_java_net_Inet6Address_init@8
_Java_java_net_InetAddressImplFactory_isIPv6Supported@8
_Java_java_net_InetAddress_init@8
_Java_java_net_NetworkInterface_getAll@8
_Java_java_net_NetworkInterface_getAll_XP@8
_Java_java_net_NetworkInterface_getByIndex0@12
_Java_java_net_NetworkInterface_getByIndex0_XP@12
_Java_java_net_NetworkInterface_getByInetAddress0@12
_Java_java_net_NetworkInterface_getByInetAddress0_XP@12
_Java_java_net_NetworkInterface_getByName0@12
_Java_java_net_NetworkInterface_getByName0_XP@12
_Java_java_net_NetworkInterface_getMTU0@16
_Java_java_net_NetworkInterface_getMTU0_XP@16
_Java_java_net_NetworkInterface_getMacAddr0@20
_Java_java_net_NetworkInterface_getMacAddr0_XP@16
_Java_java_net_NetworkInterface_init@8
_Java_java_net_NetworkInterface_isLoopback0@16
_Java_java_net_NetworkInterface_isLoopback0_XP@16
_Java_java_net_NetworkInterface_isP2P0@16
_Java_java_net_NetworkInterface_isP2P0_XP@16
_Java_java_net_NetworkInterface_isUp0@16
_Java_java_net_NetworkInterface_isUp0_XP@16
_Java_java_net_NetworkInterface_supportsMulticast0@16
_Java_java_net_NetworkInterface_supportsMulticast0_XP@16
_Java_java_net_SocketInputStream_init@8
_Java_java_net_SocketInputStream_socketRead0@28
_Java_java_net_SocketOutputStream_init@8
_Java_java_net_SocketOutputStream_socketWrite0@24
_Java_java_net_TwoStacksPlainDatagramSocketImpl_bind0@20
_Java_java_net_TwoStacksPlainDatagramSocketImpl_connect0@16
_Java_java_net_TwoStacksPlainDatagramSocketImpl_dataAvailable@8
_Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketClose@8
_Java_java_net_TwoStacksPlainDatagramSocketImpl_datagramSocketCreate@8
_Java_java_net_TwoStacksPlainDatagramSocketImpl_disconnect0@12
_Java_java_net_TwoStacksPlainDatagramSocketImpl_getTTL@8
_Java_java_net_TwoStacksPlainDatagramSocketImpl_getTimeToLive@8
_Java_java_net_TwoStacksPlainDatagramSocketImpl_init@8
_Java_java_net_TwoStacksPlainDatagramSocketImpl_join@16
_Java_java_net_TwoStacksPlainDatagramSocketImpl_leave@16
_Java_java_net_TwoStacksPlainDatagramSocketImpl_peek@12
_Java_java_net_TwoStacksPlainDatagramSocketImpl_peekData@12
_Java_java_net_TwoStacksPlainDatagramSocketImpl_receive0@12
_Java_java_net_TwoStacksPlainDatagramSocketImpl_send@12
_Java_java_net_TwoStacksPlainDatagramSocketImpl_setTTL@12
_Java_java_net_TwoStacksPlainDatagramSocketImpl_setTimeToLive@12
_Java_java_net_TwoStacksPlainDatagramSocketImpl_socketGetOption@12
_Java_java_net_TwoStacksPlainDatagramSocketImpl_socketLocalAddress@12
_Java_java_net_TwoStacksPlainDatagramSocketImpl_socketNativeSetOption@16
_Java_java_net_TwoStacksPlainSocketImpl_initProto@8
_Java_java_net_TwoStacksPlainSocketImpl_socketAccept@12
_Java_java_net_TwoStacksPlainSocketImpl_socketAvailable@8
_Java_java_net_TwoStacksPlainSocketImpl_socketBind@20
_Java_java_net_TwoStacksPlainSocketImpl_socketClose0@12
_Java_java_net_TwoStacksPlainSocketImpl_socketConnect@20
_Java_java_net_TwoStacksPlainSocketImpl_socketCreate@12
_Java_java_net_TwoStacksPlainSocketImpl_socketGetOption@16
_Java_java_net_TwoStacksPlainSocketImpl_socketListen@12
_Java_java_net_TwoStacksPlainSocketImpl_socketNativeSetOption@20
_Java_java_net_TwoStacksPlainSocketImpl_socketSendUrgentData@12
_Java_java_net_TwoStacksPlainSocketImpl_socketShutdown@12
_Java_sun_net_ExtendedOptionsImpl_flowSupported@8
_Java_sun_net_ExtendedOptionsImpl_getFlowOption@16
_Java_sun_net_ExtendedOptionsImpl_init@8
_Java_sun_net_ExtendedOptionsImpl_setFlowOption@16
_Java_sun_net_PortConfig_getLower0@8
_Java_sun_net_PortConfig_getUpper0@8
_Java_sun_net_dns_ResolverConfigurationImpl_init0@8
_Java_sun_net_dns_ResolverConfigurationImpl_loadDNSconfig0@8
_Java_sun_net_dns_ResolverConfigurationImpl_notifyAddrChange0@8
_Java_sun_net_spi_DefaultProxySelector_getSystemProxy@16
_Java_sun_net_spi_DefaultProxySelector_init@8
_Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getCredentialsHandle@20
_Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_getNextToken@24
_Java_sun_net_www_protocol_http_ntlm_NTLMAuthSequence_initFirst@12
_Java_sun_net_www_protocol_http_ntlm_NTLMAuthentication_isTrustedSite0@12
_Java_sun_net_www_protocol_http_ntlm_NTLMAuthentication_isTrustedSiteAvailable0@8
_NET_Bind@12
_NET_BindV6@8
_NET_EnableFastTcpLoopback@4
_NET_GetPortFromSockaddr@4
_NET_GetSockOpt@20
_NET_InetAddressToSockaddr@24
_NET_MapSocketOption@12
_NET_MapSocketOptionV6@12
_NET_SetSockOpt@20
_NET_SockaddrEqualsInetAddress@12
_NET_SockaddrToInetAddress@12
_NET_SocketClose@4
_NET_ThrowNew@12
_NET_Timeout2@16
_NET_Timeout@8
_NET_WinBind@16
_initInetAddressIDs@4
_ipv6_available@0
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 226KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ