C:\b\s\w\ir\cache\builder\src\out\android_profile\gen_snapshot.exe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
aad36df5f765fbbfdc8145e6b24bd960_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
aad36df5f765fbbfdc8145e6b24bd960_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
aad36df5f765fbbfdc8145e6b24bd960_NeikiAnalytics
-
Size
5.0MB
-
MD5
aad36df5f765fbbfdc8145e6b24bd960
-
SHA1
c28f088967c0af705da981ebf264aadd4724fb9b
-
SHA256
71d50daf49aa97020484e3974ad4773de92d60eedd9827b8d5951822c40b9719
-
SHA512
d9ac2c9b6c8645045bd801011a78160404368fc3b318bed242fbd2247ebdacd483a0915dcbf935ed006aa89634f98cdcdf820d9935c903397d7f779f7d4345ad
-
SSDEEP
98304:XDVVFGQ8KoT+qPyBKm3nfuhr98yKe0jAHziGl:X1k43nfuF9gS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aad36df5f765fbbfdc8145e6b24bd960_NeikiAnalytics
Files
-
aad36df5f765fbbfdc8145e6b24bd960_NeikiAnalytics.exe windows:5 windows x86 arch:x86
0e4d0b12b11b1439fb0963a967d40a4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
WSASetLastError
WSAGetLastError
WSAIoctl
WSAStartup
WSASend
WSARecv
shutdown
setsockopt
closesocket
bcrypt
BCryptGenRandom
kernel32
HeapSize
SetEnvironmentVariableW
HeapReAlloc
GetFileSizeEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
HeapAlloc
HeapFree
IsValidCodePage
ReadConsoleW
FreeLibraryAndExitThread
ExitThread
CreateThread
PeekNamedPipe
DuplicateHandle
GetModuleHandleExW
LoadLibraryExW
RaiseException
GetCPInfo
GetStringTypeW
GetACP
GetOEMCP
GetProcessHeap
WriteConsoleW
FindFirstFileExW
GetCommandLineA
SetConsoleCtrlHandler
GetConsoleOutputCP
GetConsoleCP
SetConsoleOutputCP
SetConsoleCP
GetStdHandle
GetConsoleMode
SetConsoleMode
MultiByteToWideChar
CreateFileW
SetStdHandle
CreateIoCompletionPort
CancelIoEx
CloseHandle
WaitForSingleObject
OpenThread
GetFileType
ReadFile
PostQueuedCompletionStatus
GetLastError
WriteFile
SetLastError
GetQueuedCompletionStatus
GetCurrentDirectoryW
SetErrorMode
SetUnhandledExceptionFilter
GetSystemInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
WideCharToMultiByte
ExitProcess
GetModuleHandleW
GetProcAddress
CreateEventW
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
FindNextFileW
GetFileInformationByHandle
FindClose
DeleteFileW
VirtualAlloc
SetFilePointerEx
VirtualProtect
VirtualFree
SetEndOfFile
FlushFileBuffers
GetFullPathNameW
GetCurrentThreadId
InitializeSRWLock
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeCriticalSection
InitializeConditionVariable
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SleepConditionVariableCS
WakeConditionVariable
WakeAllConditionVariable
GetCommandLineW
QueryPerformanceFrequency
QueryPerformanceCounter
GetSystemTimeAsFileTime
Sleep
FreeLibrary
SetEvent
ResetEvent
CreateFileA
GetCurrentThread
TlsGetValue
SetThreadPriority
TlsAlloc
TlsFree
VirtualQuery
TlsSetValue
SleepConditionVariableSRW
GetTimeZoneInformation
FileTimeToSystemTime
GetTimeZoneInformationForYear
SystemTimeToTzSpecificLocalTime
SuspendThread
GetThreadContext
ResumeThread
GetLocaleInfoEx
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
InitializeSListHead
UnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitOnceBeginInitialize
InitOnceComplete
EncodePointer
DecodePointer
InitializeCriticalSectionEx
LCMapStringEx
LoadLibraryExA
ntdll
RtlUnwind
Sections
.text Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 922KB - Virtual size: 921KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ