a380ab3a7edc380a04e288e330474800_NeikiAnalytics

Sharing

Copy URL Twitter E-mail

General

Target

a380ab3a7edc380a04e288e330474800_NeikiAnalytics
Size

79KB
MD5

a380ab3a7edc380a04e288e330474800
SHA1

3695a4c4182be57af4e7d3b0cbf912f1efedb1f4
SHA256

415518533c0506cb24e1825c0daa43940616d61b11c44734b3b5a9ffc2b8b73e
SHA512

ddc42ff760d09f4a534389b05d463317e3826375c1e998299c59b88276efd3a19541eaa932fccd5d4e24d3e2f6f2b29878bf88b52874d7f635d6a49c2a7b70d7
SSDEEP

1536:qVQkcUHNQeScpd+Epb203Qc1jRGo7kpvGQ1uuItWcYAHMFFuFXld:xkNNQM+EpNbkpOQ4dWcx22Xl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a380ab3a7edc380a04e288e330474800_NeikiAnalytics

Files

a380ab3a7edc380a04e288e330474800_NeikiAnalytics
.dll windows:6 windows x64 arch:x64

c95b660347357b9caab75f3aa49acef6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Administrator\runner\builds\gstreamer\cerbero\cerbero-build\sources\msvc_x86_64\gstreamer-1.0\subprojects\gst-plugins-bad\_builddir\gst\asfmux\gstasfmux.pdb

Imports

gstbase-1.0-0

gst_base_parse_set_syncable
gst_base_parse_set_min_frame_size
gst_base_parse_finish_frame
gst_base_parse_get_type
gst_collect_pads_event_default
gst_collect_pads_pop
gst_collect_pads_peek
gst_collect_pads_stop
gst_collect_pads_start
gst_collect_pads_add_pad
gst_collect_pads_set_event_function
gst_collect_pads_set_function
gst_collect_pads_new

gstreamer-1.0-0

gst_tag_setter_merge_tags
gst_tag_setter_reset_tags
gst_tag_setter_get_type
gst_value_array_append_value
_gst_debug_register_funcptr
_gst_debug_category_new
gst_debug_log
gst_stream_error_quark
gst_tag_setter_get_tag_list
gst_element_message_full
_gst_element_error_printf
gst_element_add_pad
gst_element_get_type
gst_element_class_set_static_metadata
gst_element_class_get_pad_template
gst_element_class_add_static_pad_template
gst_element_register
gst_tag_setter_get_tag_merge_mode
gst_pad_send_event
gst_pad_push_event
gst_pad_push
gst_pad_get_current_caps
gst_pad_get_pad_template_caps
gst_pad_get_element_private
gst_pad_set_active
gst_pad_new_from_static_template
gst_pad_new_from_template
gst_pad_get_type
gst_event_parse_tag
gst_event_new_segment
gst_event_parse_caps
gst_event_new_caps
gst_event_new_eos
gst_event_new_stream_start
gst_query_parse_seeking
gst_pad_use_fixed_caps
_gst_buffer_type
_gst_debug_min
gst_mini_object_ref
_gst_value_array_type
gst_buffer_copy_region
GST_CAT_DEFAULT
gst_caps_new_simple
gst_mini_object_replace
gst_buffer_memset
gst_buffer_set_size
gst_buffer_append
gst_plugin_register_static
gst_pad_peer_query
gst_object_get_parent
gst_query_new_seeking
gst_tag_list_get_string
gst_tag_list_copy_value
gst_tag_list_foreach
gst_tag_list_add_value
gst_tag_list_insert
gst_tag_list_is_empty
gst_tag_list_new_empty
gst_segment_init
gst_buffer_unmap
gst_buffer_map
gst_buffer_get_size
gst_buffer_extract
gst_buffer_new_allocate
gst_caps_to_string
gst_caps_is_fixed
gst_caps_get_structure
gst_structure_get_string
gst_structure_get_int
gst_structure_get_value
gst_structure_set_value
gst_structure_get_name
gst_mini_object_copy
gst_mini_object_make_writable
gst_mini_object_unref
gst_object_unref

gobject-2.0-0

g_type_check_value_holds
g_value_get_string
g_value_get_uint64
g_value_set_uint64
g_value_get_uint
g_value_set_uint
g_value_get_boolean
g_value_set_boolean
g_param_spec_uint64
g_param_spec_uint
g_param_spec_boolean
g_object_notify
g_object_class_install_property
g_value_get_boxed
g_value_set_boxed
g_value_unset
g_value_reset
g_value_init
g_type_check_instance_is_a
g_type_class_adjust_private_offset
g_type_add_interface_static
g_type_register_static_simple
g_type_class_peek_parent
g_type_name

glib-2.0-0

g_error_free
g_base64_encode
g_get_real_time
g_assertion_message_expr
g_strdup_printf
g_random_int
g_return_if_fail_warning
g_log
g_utf8_strlen
g_slist_sort
g_slist_length
g_slist_nth
g_slist_copy
g_slist_remove
g_slist_append
g_slist_free
g_malloc0_n
g_malloc0
g_free
g_dgettext
g_convert
g_once_init_leave
g_once_init_enter
g_snprintf
g_intern_static_string

gstrtp-1.0-0

gst_rtp_buffer_set_timestamp
gst_rtp_base_payload_push
gst_rtp_base_payload_set_outcaps
gst_rtp_base_payload_set_options
gst_rtp_base_payload_get_type
gst_rtp_buffer_get_payload
gst_rtp_buffer_get_payload_len
gst_rtp_buffer_set_ssrc
gst_rtp_buffer_set_seq
gst_rtp_buffer_set_payload_type
gst_rtp_buffer_set_marker
gst_rtp_buffer_unmap
gst_rtp_buffer_map
gst_rtp_buffer_new_allocate_len

vcruntime140

__current_exception
memcpy
memset
__current_exception_context
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_crt_atexit
_seh_filter_dll
_initterm_e
_initterm
_cexit
terminate
_configure_narrow_argv
_crt_at_quick_exit

kernel32

QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry

Exports

Exports

gst_plugin_asfmux_get_desc
gst_plugin_asfmux_register

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c95b660347357b9caab75f3aa49acef6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gstbase-1.0-0

gstreamer-1.0-0

gobject-2.0-0

glib-2.0-0

gstrtp-1.0-0

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 49KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 3KB - Virtual size: 2KB

.reloc Size: 512B - Virtual size: 112B

.text
Size: 49KB - Virtual size: 49KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 512B - Virtual size: 112B