msitran.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b74aca3d48de0b743572df9d4c6ce580_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
b74aca3d48de0b743572df9d4c6ce580_NeikiAnalytics
-
Size
621KB
-
MD5
b74aca3d48de0b743572df9d4c6ce580
-
SHA1
dbdaac12523ccb2b17b27af3d5f54eb7453bae83
-
SHA256
f317a9db24869a94cc9fc795fcf647ada3b2086ec12af4ad941adf67c04be614
-
SHA512
4b3e5dc8b4e8eb8c3a3ca0a5d4d1ae47c219f1a4a7e242d157371ff65fdd00edd72c18d4bdabeb3b7ae7cb11909f4b33a515de9bc85fcbbb32f4d9b0fdaa23fd
-
SSDEEP
12288:MdF5WfSn3F4SOpFjn04R4gq4HSUQH4WT65RShG605414IQanx8/6:MdF4anV49pFT0SLTQYWkK2u4dax8C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b74aca3d48de0b743572df9d4c6ce580_NeikiAnalytics
Files
-
b74aca3d48de0b743572df9d4c6ce580_NeikiAnalytics.exe windows:10 windows x86 arch:x86
2966c47977779404e0d6eb3117dd103a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleFileNameA
GetStdHandle
WriteFile
lstrlenA
GetCommandLineA
GetLastError
GlobalAlloc
GlobalFree
GetProcAddress
ExitProcess
GetModuleHandleW
CloseHandle
CreateFileW
VirtualQuery
GetSystemInfo
FlushFileBuffers
WriteConsoleW
SetStdHandle
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
GetConsoleMode
GetConsoleCP
GetVersionExW
SetUnhandledExceptionFilter
SetLastError
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
HeapCreate
HeapFree
VirtualFree
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
OutputDebugStringA
EnterCriticalSection
LeaveCriticalSection
Sleep
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
VirtualProtect
HeapReAlloc
VirtualAlloc
RtlUnwind
msi
ord23
ord7
ord20
ord18
ord124
ord170
ord91
ord185
ord48
ord8
ord119
user32
MessageBoxA
ole32
CoInitialize
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
shlwapi
StrStrIA
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE