MsiMerg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
243f31357e83f6094c6fb235ab8cb420_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
243f31357e83f6094c6fb235ab8cb420_NeikiAnalytics
-
Size
1.3MB
-
MD5
243f31357e83f6094c6fb235ab8cb420
-
SHA1
0f23886b5849193116c9771cf8082227faed73f1
-
SHA256
071bcc73bde41508073a786dd6c22b3ad137926fa24b8be3c8856b9bb3973528
-
SHA512
f4be0067bb8f6c153a3e1ca8cb4d40750e6426efa7bd39c36d1b3fb5e7f778972af3c95fb931cb8808fed6ab88d6659bd8fc183310061b42fa0f90c652a81d32
-
SSDEEP
24576:aBpZhRVldlnXfH9gPwCn7vOb7HHcp/CGXQp:CpvRVlbnXf9gPTTW7H1GXC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 243f31357e83f6094c6fb235ab8cb420_NeikiAnalytics
Files
-
243f31357e83f6094c6fb235ab8cb420_NeikiAnalytics.exe windows:10 windows x86 arch:x86
1f66958841082f299a00160c1b625075
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleFileNameA
GetStdHandle
WriteFile
lstrlenA
GetCommandLineA
GetLastError
GlobalAlloc
GlobalFree
GetProcAddress
ExitProcess
GetModuleHandleW
CloseHandle
CreateFileW
VirtualQuery
GetSystemInfo
FlushFileBuffers
WriteConsoleW
SetStdHandle
LCMapStringW
MultiByteToWideChar
GetVersionExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetLastError
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
HeapCreate
HeapFree
VirtualFree
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
OutputDebugStringA
EnterCriticalSection
LeaveCriticalSection
Sleep
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
VirtualProtect
HeapAlloc
HeapReAlloc
VirtualAlloc
RtlUnwind
GetConsoleCP
GetConsoleMode
SetFilePointer
GetStringTypeW
user32
MessageBoxA
msi
ord20
ord7
ord8
ord29
ord91
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
shlwapi
StrStrIA
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE