C:\re\jdk7u45\229\build\windows-amd64\tmp\javacplexec\obj64\javacpl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
08d43c232b6adcbb45d010cb7f9b2880_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
08d43c232b6adcbb45d010cb7f9b2880_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
08d43c232b6adcbb45d010cb7f9b2880_NeikiAnalytics
-
Size
2.9MB
-
MD5
08d43c232b6adcbb45d010cb7f9b2880
-
SHA1
19f9750cccdf56056f5fe4e27a95d0681f739364
-
SHA256
e1e0996575fffc79e067a67c3cd4483126e563e7ec66981eebbef2891a018876
-
SHA512
2676cc62ceb6926d5aefbf38f63e916dc0c394a0fbab0d5ab9372c4d176caed763bda7b19acfbfe92338bf8597caaada0295c71ca84f52f5a5ace43f7884ea04
-
SSDEEP
49152:K6HnJ6HnqIgekIhKPgssSt2g32RAR5FeA6w:5ekIhv7Stn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08d43c232b6adcbb45d010cb7f9b2880_NeikiAnalytics
Files
-
08d43c232b6adcbb45d010cb7f9b2880_NeikiAnalytics.exe windows:5 windows x64 arch:x64
9bd8499d2ac056a616bc7696c39c263b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
user32
MessageBoxW
LoadStringW
wsprintfW
msvcr100
__dllonexit
_lock
_onexit
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__crt_debugger_hook
__set_app_type
_fmode
_commode
__setusermatherr
??2@YAPEAX_K@Z
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
__getmainargs
_amsg_exit
__C_specific_handler
?terminate@@YAXXZ
memcpy
_vsnwprintf_s
_ftime64_s
wcsftime
_snwprintf_s
_localtime64
wcsncpy_s
_wstat64i32
wcscat_s
memcpy_s
_wsplitpath_s
wcscpy_s
_wtoi
memset
swprintf_s
??_U@YAPEAX_K@Z
??3@YAXPEAX@Z
__CxxFrameHandler3
_stat64i32
_CxxThrowException
malloc
??_V@YAXPEAX@Z
free
_unlock
kernel32
LoadLibraryW
LocalFree
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
RaiseException
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
DecodePointer
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
EncodePointer
GetStartupInfoW
Sleep
GetCurrentThreadId
GetCurrentProcessId
OutputDebugStringW
GetShortPathNameW
LocalAlloc
lstrlenW
WaitForSingleObject
CreateProcessW
GetSystemDirectoryW
CreateFileW
GetNativeSystemInfo
GetCurrentProcess
GetVersionExW
GlobalMemoryStatusEx
GetModuleHandleW
GetModuleFileNameW
GetLongPathNameW
GetLastError
GetProcAddress
FreeLibrary
CloseHandle
FormatMessageW
GetEnvironmentVariableW
GetWindowsDirectoryW
LoadLibraryA
ole32
CoTaskMemFree
StringFromCLSID
oleaut32
SysStringLen
SysAllocStringByteLen
SysAllocString
VariantClear
SysFreeString
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 306B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ