D:\Project\PassID\SourceCode\PassIDform_OS\Release\PassIDform.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bd1110ae47a0a0c0e7686861e8643290_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd1110ae47a0a0c0e7686861e8643290_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
bd1110ae47a0a0c0e7686861e8643290_NeikiAnalytics
-
Size
5.0MB
-
MD5
bd1110ae47a0a0c0e7686861e8643290
-
SHA1
e8686f4741ca121a67582d3376aceea336a35291
-
SHA256
cdc842c8f89619d3c6f87cb73b2776be4b141b3091186c11596225d2ebb029c1
-
SHA512
f1a23381a68c99097cbfd5ba8116f2b7645a67de88860df5799d8bfc7e86f5ee52b9551b0dd022e9f169c356f201c6ce2cea3fe82fce41aada7d745a3ffa79db
-
SSDEEP
98304:0S7L0yxrMt1FHdD+4uPwQsA9mldmXrSdCfnT95HXMzzzzzzzzzz+zzzzzzzzzzzc:0S7NxidD+OvWrSdCfTbq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd1110ae47a0a0c0e7686861e8643290_NeikiAnalytics
Files
-
bd1110ae47a0a0c0e7686861e8643290_NeikiAnalytics.exe windows:6 windows x86 arch:x86
891e30e5402a1f38a9840602c7a71d04
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
elymrtd
getDeliveryDate
getIssuingAuthority
getOptionalDetails
getFamilyName
getGivenNames
getIssuingDate
getExpiryDate
getIssuingCountry
getLicenceNumber
chipAuthentication
getValidityDate
passiveAuthenticationNoChain
getProfession
calculateChecksum
getSex
getBirthDate
getCountryNameL
getDG1
getDG2
getDG11
getDG12
getDG13
getSelectAntenna
getNationality
getName
getPhoneNumber
getResidence
getBirthPlace
getFullBirthDate
getPhoto
getOptionalData
passiveAuthentication
getPersonalNumber
getSurname
getDocNum
getIssuingState
getDocumentType
readEF_SOd
readDG15
readDG14
readDG13
readDG12
readDG11
readDG6
readDG3
readDG2
readDG1
disconnect
establishBAC
connect
terminalAuthentication
init
freeimage
_FreeImage_LoadFromMemory@12
_FreeImage_CloseMemory@4
_FreeImage_OpenMemory@8
_FreeImage_Save@16
_FreeImage_Unload@4
_FreeImage_GetFileTypeFromMemory@8
kernel32
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GlobalGetAtomNameW
GetAtomNameW
SystemTimeToFileTime
GlobalFlags
GetProfileIntW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
LocalFileTimeToFileTime
SetFileTime
SetErrorMode
FindResourceExW
GetWindowsDirectoryW
GetDiskFreeSpaceW
GetTempFileNameW
ReplaceFileW
GetUserDefaultLCID
SearchPathW
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
CreateSemaphoreW
WaitForMultipleObjects
CreateMutexW
ReleaseMutex
ReleaseSemaphore
GetThreadLocale
GetStringTypeExW
MoveFileW
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
GetFileSize
FlushFileBuffers
CompareStringA
lstrcmpA
GetCurrentThread
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
SetEvent
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
GetModuleHandleA
FreeResource
GetCurrentThreadId
EncodePointer
OutputDebugStringA
GlobalSize
LocalUnlock
LocalLock
LoadLibraryExW
WinExec
CreateProcessW
GetTempPathW
GetModuleHandleW
SetCommTimeouts
SetCommState
TlsGetValue
GetCommTimeouts
GetCommState
ClearCommError
WriteFile
ReadFile
GetLocaleInfoW
GetVersion
Beep
FormatMessageW
FindNextChangeNotification
FindFirstChangeNotificationW
FindCloseChangeNotification
GetLocalTime
GetCurrentProcessId
WaitForSingleObject
lstrlenW
lstrcatW
lstrcpyW
GetFileTime
GetFileAttributesW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
OutputDebugStringW
CopyFileW
SetFileAttributesW
RemoveDirectoryW
GetLogicalDrives
GetDriveTypeW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
VerifyVersionInfoW
GetSystemDirectoryW
SetLastError
QueryDosDeviceW
CreateFileW
VerSetConditionMask
GetDefaultCommConfigW
LocalFree
LocalAlloc
GetModuleFileNameW
CloseHandle
MulDiv
LoadLibraryA
FreeLibrary
GetTickCount
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetProcAddress
GetVersionExW
GetCurrentProcess
Sleep
GetCurrentDirectoryW
SetCurrentDirectoryW
GetCommandLineW
CreateThread
FindResourceW
SizeofResource
LockResource
LoadResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
TlsAlloc
InitializeCriticalSection
PurgeComm
VirtualProtect
GetStringTypeW
LCMapStringW
GetCPInfo
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
VirtualQuery
GetACP
GetSystemInfo
VirtualAlloc
MoveFileExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCommandLineA
HeapQueryInformation
QueryPerformanceFrequency
SetStdHandle
GetFileType
GetStdHandle
GetModuleFileNameA
ExitProcess
GetConsoleMode
ReadConsoleW
SetFilePointerEx
IsValidCodePage
GetOEMCP
IsValidLocale
EnumSystemLocalesW
GetDateFormatW
GetTimeFormatW
GetConsoleCP
GetTimeZoneInformation
FindFirstFileExA
FindFirstFileExW
FindNextFileA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetConsoleCtrlHandler
WriteConsoleW
CompareStringW
user32
GetWindowRgn
DestroyCursor
GetTabbedTextExtentW
FrameRect
CopyIcon
IsZoomed
DrawFrameControl
DrawStateW
SetWindowRgn
SetClassLongW
EnumDisplayMonitors
SetLayeredWindowAttributes
NotifyWinEvent
InvertRect
EnableScrollBar
GetIconInfo
IsRectEmpty
GetNextDlgGroupItem
GetMenuDefaultItem
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
InsertMenuItemW
LoadAcceleratorsW
DeleteMenu
TrackMouseEvent
CopyImage
RealChildWindowFromPoint
GetSysColorBrush
MapDialogRect
IsClipboardFormatAvailable
GetMenuItemInfoW
DestroyMenu
MsgWaitForMultipleObjectsEx
CharUpperW
GetKeyNameTextW
ShowOwnedPopups
GetMessageW
LoadMenuW
SetRectEmpty
SendDlgItemMessageA
GetNextDlgTabItem
EndDialog
ScrollWindowEx
IsWindowEnabled
SendDlgItemMessageW
IsDlgButtonChecked
CheckRadioButton
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
GetMonitorInfoW
MonitorFromWindow
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetTopWindow
GetClassLongW
EqualRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
GetClassInfoExW
GetClassInfoW
CallWindowProcW
GetMessageTime
RegisterWindowMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
ClientToScreen
UnhookWindowsHookEx
WindowFromDC
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
WinHelpW
IsDialogMessageW
GetWindow
GetLastActivePopup
SetRect
MessageBeep
SetWindowTextW
EndPaint
BeginPaint
DrawIcon
GetActiveWindow
GetDialogBaseUnits
CheckDlgButton
GetDlgItem
CreateDialogIndirectParamW
MoveWindow
DestroyWindow
PostQuitMessage
WaitMessage
LoadStringW
EnableMenuItem
GetSystemMenu
DrawIconEx
DestroyIcon
MonitorFromPoint
SystemParametersInfoW
GetWindowLongW
ValidateRect
CreateWindowExW
RegisterClassW
DefWindowProcW
PostThreadMessageW
GetDesktopWindow
EnumWindows
MapVirtualKeyW
SendInput
keybd_event
VkKeyScanExW
VkKeyScanW
SetKeyboardState
GetKeyboardState
SetFocus
ShowWindow
DispatchMessageW
TranslateMessage
GetKeyboardLayout
GetKeyboardLayoutList
IsIconic
GetWindowThreadProcessId
FindWindowExW
AppendMenuW
CreatePopupMenu
GetAsyncKeyState
BringWindowToTop
UnregisterDeviceNotification
RegisterDeviceNotificationW
PeekMessageW
SetParent
TranslateAcceleratorW
SetWindowPos
wsprintfW
LoadImageW
SetWindowLongW
OffsetRect
DrawFocusRect
GetSystemMetrics
DrawEdge
KillTimer
SetTimer
MessageBoxW
CopyRect
FillRect
GetDC
PtInRect
UnionRect
IntersectRect
InflateRect
ScreenToClient
SetCaretPos
ShowCaret
HideCaret
DestroyCaret
CreateCaret
GetClientRect
TabbedTextOutW
GrayStringW
DrawTextExW
CreateMenu
InSendMessage
MonitorFromRect
SendNotifyMessageW
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
EnumChildWindows
GetDCEx
GetUpdateRect
CharUpperBuffW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
DrawTextW
GetCapture
GetKeyState
GetFocus
EmptyClipboard
LockWindowUpdate
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetComboBoxInfo
RemoveMenu
UpdateLayeredWindow
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
PostMessageW
GetSysColor
MessageBoxIndirectW
GetForegroundWindow
RegisterClipboardFormatW
ExitWindowsEx
LoadCursorW
LoadBitmapW
GetClassNameW
FindWindowW
WindowFromPoint
GetCursorPos
SetCursor
SetCursorPos
GetWindowTextW
RedrawWindow
InvalidateRect
ReleaseDC
GetWindowDC
SetForegroundWindow
UpdateWindow
ReleaseCapture
SetCapture
IsWindowVisible
IsWindow
LoadIconW
GetParent
GetWindowRect
EnableWindow
UnregisterClassW
SendMessageW
GetMessagePos
gdi32
Rectangle
GetStockObject
CreateSolidBrush
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
SelectObject
EnumFontFamiliesExW
GetBkColor
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetDIBits
SetPixel
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
GetCharWidthW
StretchDIBits
GetRgnBox
OffsetRgn
DPtoLP
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileW
DeleteMetaFile
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextFaceW
SelectClipRgn
SaveDC
RestoreDC
PlayMetaFile
OffsetClipRgn
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
SetRectRgn
PatBlt
GetMapMode
CreateRectRgnIndirect
ExtSelectClipRgn
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
PolylineTo
PolyBezierTo
MoveToEx
ExtCreatePen
SetArcDirection
SelectClipPath
PolyDraw
ArcTo
StartDocW
SetColorAdjustment
ModifyWorldTransform
SetWorldTransform
EnumMetaFile
PlayMetaFileRecord
SetTextJustification
SetTextAlign
SetTextCharacterExtra
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
SetMapperFlags
SetBkMode
CreatePen
GetObjectW
GetCurrentObject
DeleteDC
GetObjectType
GetCurrentPositionEx
GetClipRgn
GetClipBox
ExcludeClipRect
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreateDIBPatternBrushPt
CreateBitmap
GetDeviceCaps
CopyMetaFileW
SetTextColor
SetBkColor
CreateDCW
GetTextColor
CreateFontW
CreateFontIndirectW
SetDIBColorTable
CreateDIBSection
SetStretchBltMode
GetTextExtentPoint32W
StretchBlt
SetPixelV
GetPixel
DeleteObject
ExtTextOutW
TextOutW
GetTextMetricsW
RectVisible
PtVisible
Escape
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SelectPalette
msimg32
AlphaBlend
TransparentBlt
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
GetJobW
EnumPortsW
advapi32
RegOpenKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
AllocateAndInitializeSid
SetFileSecurityW
GetFileSecurityW
RegQueryValueW
RegEnumKeyW
RegSetValueW
RegFlushKey
RegDeleteValueW
StartServiceW
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
RegUnLoadKeyW
RegSetValueExW
OpenProcessToken
RegLoadKeyW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCreateKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegCloseKey
GetTokenInformation
GetSidSubAuthority
FreeSid
DuplicateToken
CreateWellKnownSid
CheckTokenMembership
shell32
SHGetSpecialFolderLocation
Shell_NotifyIconW
DragQueryFileW
SHGetFileInfoW
SHGetFolderPathW
SHAppBarMessage
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetMalloc
SHGetDesktopFolder
ShellExecuteExW
DragFinish
ExtractIconW
SHAddToRecentDocs
comctl32
ImageList_DrawEx
ImageList_GetIconSize
ImageList_Draw
ImageList_GetImageInfo
shlwapi
SHCopyKeyW
StrFormatByteSizeW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
uxtheme
GetThemePartSize
IsAppThemed
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText
ole32
OleCreateLinkToFile
RevokeDragDrop
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
CoTreatAsClass
CreateBindCtx
ReadClassStg
WriteClassStg
WriteFmtUserTypeStg
ReadFmtUserTypeStg
OleDuplicateData
ReleaseStgMedium
OleRegGetUserType
SetConvertStg
CoUninitialize
CoCreateGuid
CoInitialize
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
OleGetClipboard
CoLockObjectExternal
OleQueryCreateFromData
OleQueryLinkFromData
CoGetMalloc
OleIsRunning
GetRunningObjectTable
CreateOleAdviseHolder
CreateDataAdviseHolder
GetHGlobalFromILockBytes
OleGetIconOfClass
OleSetContainedObject
OleSaveToStream
OleSave
OleLoad
OleCreateFromFile
RegisterDragDrop
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
WriteClassStm
CreateItemMoniker
CreateGenericComposite
StgCreateDocfileOnILockBytes
OleRegEnumVerbs
OleRegGetMiscStatus
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateILockBytesOnHGlobal
CreateFileMoniker
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
OleLockRunning
OleSetMenuDescriptor
DoDragDrop
PropVariantCopy
OleRun
CLSIDFromProgID
CoInitializeEx
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
CLSIDFromString
CoDisconnectObject
StringFromGUID2
oleaut32
VarBstrFromDate
VarBstrFromCy
VarCyFromStr
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
VarBstrFromDec
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysReAllocStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
SysAllocString
VariantChangeType
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
VarDateFromStr
VariantClear
VariantInit
VarDecFromStr
SafeArrayDestroy
SysFreeString
GetErrorInfo
SetErrorInfo
CreateErrorInfo
oledlg
OleUIBusyW
gdiplus
GdipCreateFromHWNDICM
GdipDrawImageRectI
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipDeleteFont
GdipDrawString
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipCreateFromHWND
GdipCreateSolidFill
GdipDeleteBrush
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImageThumbnail
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCloneBrush
winscard
SCardEstablishContext
SCardReleaseContext
SCardGetStatusChangeW
SCardConnectW
SCardDisconnect
SCardGetAttrib
SCardListReadersW
wininet
InternetCheckConnectionW
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundW
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 675KB - Virtual size: 674KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.giats Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ