C:\rezi\folohiluhaxu\zucabizehu5\pacuf_kifilopocepuc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ceebd08565d3cdae309722298e386000_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ceebd08565d3cdae309722298e386000_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
ceebd08565d3cdae309722298e386000_NeikiAnalytics
-
Size
3.2MB
-
MD5
ceebd08565d3cdae309722298e386000
-
SHA1
d7feb50692a468a3f0567ef508d6fb4f40be326e
-
SHA256
2bc31a41f36643ba5007231f415dffbc83b6f7cacadc73cf175b4f4070dfda44
-
SHA512
55868d13265fa4c5b24699f9b9817de0e893c4e2b611787d5caede75ad5b914a4fb14f0f0ee971282a665db1a5e0b050aa52ed0bd42086dbb7839e08e2aae6ca
-
SSDEEP
98304:uDr7DY9KAUt0tZeWIuSgsOsphSguWSOMy:mY9KA5Z+uaDpMzy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ceebd08565d3cdae309722298e386000_NeikiAnalytics
Files
-
ceebd08565d3cdae309722298e386000_NeikiAnalytics.exe windows:5 windows x86 arch:x86
68e20b5eb0d9c7536ae213d4ad6dc8ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetSystemDefaultLangID
InterlockedDecrement
QueryDosDeviceA
InterlockedCompareExchange
MoveFileWithProgressA
GetModuleHandleW
GetTickCount
VirtualFree
GetConsoleAliasesLengthA
FreeConsole
GetModuleFileNameW
SetComputerNameExW
GetStartupInfoW
CreateJobObjectA
GetLastError
SetLastError
ReadConsoleOutputCharacterA
GetProcAddress
VirtualAlloc
SetVolumeLabelW
LoadLibraryA
WriteConsoleA
LocalAlloc
MoveFileA
FindFirstVolumeMountPointW
RemoveDirectoryW
FindNextChangeNotification
GlobalFindAtomW
GetStringTypeW
PurgeComm
GetFileAttributesExW
WaitForDebugEvent
WriteConsoleOutputAttribute
SetCalendarInfoA
GetCurrentProcessId
DeleteFileA
MultiByteToWideChar
Sleep
ExitProcess
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
CloseHandle
EnterCriticalSection
LeaveCriticalSection
RaiseException
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetLocaleInfoA
HeapAlloc
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
GetModuleHandleA
HeapSize
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
CreateFileA
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ