c:\graphviz-ms\bin\lefty.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6cc038ce9ff6becef59c44cca0af6a70_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6cc038ce9ff6becef59c44cca0af6a70_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
6cc038ce9ff6becef59c44cca0af6a70_NeikiAnalytics
-
Size
212KB
-
MD5
6cc038ce9ff6becef59c44cca0af6a70
-
SHA1
c0f1cafe1566d8bb27864c6403036c9755e7d645
-
SHA256
7b814821cc9820427b9107668c5a0dff0074492376c25fa959d1f38c12e6e88a
-
SHA512
6e743ce677d3ef6945bc3d69ea3a227e92c6a49cbe221d443919607bd3a02631add76b85a48a66bfc8a7e7af8bdf2eb7723d788c9ae84cc9e998e275206a9773
-
SSDEEP
6144:xgh6gvo/lsFYFezxTyyTZm8MVnVH0cDl:x9NBFezxjZmjVnJ3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cc038ce9ff6becef59c44cca0af6a70_NeikiAnalytics
Files
-
6cc038ce9ff6becef59c44cca0af6a70_NeikiAnalytics.exe windows:5 windows x86 arch:x86
9373b9f5bf1d0c7689284e3e84f3157d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GlobalFree
GlobalReAlloc
GlobalAlloc
CreatePipe
GetStdHandle
SetStdHandle
GetCurrentProcess
DuplicateHandle
CreateProcessA
WriteFile
ReadFile
CloseHandle
WinExec
GlobalLock
GlobalUnlock
GetModuleFileNameA
user32
DrawTextA
GetAsyncKeyState
ScreenToClient
GetCursorPos
ReleaseDC
RegisterClassA
LoadIconA
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
DefWindowProcA
SetFocus
EndPaint
BeginPaint
SetScrollPos
GetScrollPos
GetScrollRange
SendMessageA
SetScrollRange
InvalidateRect
CreatePopupMenu
DestroyMenu
AppendMenuA
PostMessageA
TrackPopupMenu
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
DialogBoxParamA
EndDialog
GetDlgItemTextA
LoadCursorA
SetCursor
GetDC
GetWindowTextA
SetWindowTextA
GetClientRect
DestroyWindow
GetWindowRect
SetWindowPos
CreateWindowExA
ShowWindow
UpdateWindow
MessageBoxA
SetDlgItemTextA
SendDlgItemMessageA
GetWindowTextLengthA
MsgWaitForMultipleObjects
gdi32
SetPaletteEntries
SetBkMode
SetTextColor
CreatePen
SelectObject
CreateSolidBrush
RealizePalette
SelectPalette
CreatePalette
DeleteObject
Rectangle
LineTo
MoveToEx
ResizePalette
Polygon
Arc
Chord
GetTextExtentPoint32A
GetTextMetricsA
CreateFontA
SetPixel
DeleteDC
CreateCompatibleDC
GetPixel
BitBlt
SetROP2
GetDeviceCaps
CreatePatternBrush
Polyline
CloseEnhMetaFile
GetStockObject
DeleteMetaFile
EndPage
EndDoc
CreateEnhMetaFileA
StartDocA
StartPage
CreateBitmap
comdlg32
PrintDlgA
GetOpenFileNameA
msvcr90
isalpha
_read
_fdopen
_strdup
_putenv
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_crt_debugger_hook
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
vfprintf
__argv
__argc
fflush
_fstat64i32
fopen
strcpy
strlen
strchr
strcat
strrchr
malloc
getenv
free
_stat64i32
sprintf
vsprintf
abort
qsort
strcmp
putchar
fprintf
__iob_func
_setjmp3
longjmp
atoi
ispunct
strncmp
realloc
sscanf
islower
tolower
isupper
fputs
fputc
isspace
isalnum
_fileno
isdigit
sin
cos
sqrt
atan2
ferror
fread
fgets
fwrite
log
exit
strtod
strncpy
tan
rand
atof
fclose
Sections
.text Size: 173KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ