D:\builder\stage_32\iconv\Debug_Win32\iconv_d.pdb
Static task
static1
Behavioral task
behavioral1
Sample
becdf84c38fe337aa56e1aebb9475d90_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
becdf84c38fe337aa56e1aebb9475d90_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
becdf84c38fe337aa56e1aebb9475d90_NeikiAnalytics
-
Size
1.6MB
-
MD5
becdf84c38fe337aa56e1aebb9475d90
-
SHA1
9424934addb84bc8dc47ccb855d18363906bc242
-
SHA256
4c8d37f660ea9757377cf56d735bfa8edace9e6a42d92a8d9f07cc4b42891a99
-
SHA512
9a0df3d4be6a89131f24bbb14a039b9c6a9362bbffd5bd8437e55689c21d363f63d20dba881ce666a5cc33c89c95f76349fc9097d7c940c0a62f63d5dd245c0c
-
SSDEEP
24576:wRdmInXPbdSGsauuRGavkg3Nyy4BAUZLYgbbTMcfKkf7Fl:KRzsauuRGaXh4BAUZLYrQPTz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource becdf84c38fe337aa56e1aebb9475d90_NeikiAnalytics
Files
-
becdf84c38fe337aa56e1aebb9475d90_NeikiAnalytics.dll windows:5 windows x86 arch:x86
e566b4c7f75fb206c6b9789bbdb5bb3e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetACP
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
IsDebuggerPresent
EncodePointer
DecodePointer
GetLastError
SetLastError
InterlockedIncrement
InterlockedDecrement
GetCurrentThread
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
GetStdHandle
WriteFile
SetConsoleCtrlHandler
HeapValidate
GetSystemInfo
RaiseException
LoadLibraryExW
lstrlenA
LoadLibraryW
WideCharToMultiByte
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CreateSemaphoreW
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
IsValidCodePage
GetOEMCP
GetCPInfo
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
OutputDebugStringA
WriteConsoleW
InterlockedExchange
FreeLibrary
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
HeapAlloc
VirtualQuery
GetConsoleCP
GetConsoleMode
SetFilePointerEx
RtlUnwind
GetStringTypeW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
FlushFileBuffers
CreateFileW
CloseHandle
Exports
Exports
_libiconv_version
iconv_canonicalize
libiconv
libiconv_close
libiconv_open
libiconv_open_into
libiconvctl
libiconvlist
locale_charset
Sections
.textbss Size: - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 505KB - Virtual size: 505KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ