C:\Users\ДНС\documents\visual studio 2012\Projects\files\Debug\files.pdb
Static task
static1
Behavioral task
behavioral1
Sample
77a3706e048950e2ad9430ba54256e50_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
77a3706e048950e2ad9430ba54256e50_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
77a3706e048950e2ad9430ba54256e50_NeikiAnalytics
-
Size
34KB
-
MD5
77a3706e048950e2ad9430ba54256e50
-
SHA1
c619594c9e0e60f9c6edf59ceb9bf7ad20f192aa
-
SHA256
a7e0760cc2fddad1d68abf2218d0a1e32890e245dec9219a992e7d2cfae20429
-
SHA512
fabaa6c1840a5db98dd1f48934d99f68a273adbcb54322fff17daad22b7ac431b6f2a086a158725d7271245167e921ed68b9889d644ff899e16f2fea53abc986
-
SSDEEP
384:7ivAvCUM6x0EfcmkQ6J+XcxMY4Dp9XT2otxAYpEamt54t5PqcTc2C:ucCwDr6JkcI9XqYpqkmA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77a3706e048950e2ad9430ba54256e50_NeikiAnalytics
Files
-
77a3706e048950e2ad9430ba54256e50_NeikiAnalytics.exe windows:6 windows x86 arch:x86
a2fd4557f1573758f8c84255c36bb19b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcr110d
__setusermatherr
_initterm_e
_initterm
__initenv
_fmode
_commode
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
?terminate@@YAXXZ
_configthreadlocale
_lock
_unlock
_calloc_dbg
__dllonexit
_onexit
_invoke_watson
_controlfp_s
_except_handler4_common
wcscpy_s
_wmakepath_s
_wsplitpath_s
_cexit
_exit
_CrtSetCheckCount
_CrtDbgReportW
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
_CRT_RTC_INITW
strlen
puts
fputc
fopen
fgets
fflush
fclose
__iob_func
system
exit
setlocale
_getch
scanf
__crtSetUnhandledExceptionFilter
printf
_fcloseall
fputs
kernel32
GetModuleFileNameW
FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
DecodePointer
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryW
lstrlenA
LoadLibraryExW
GetProcAddress
GetLastError
RaiseException
IsDebuggerPresent
EncodePointer
GetModuleHandleW
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ