MsiInfo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7e85f5ba9c4c6e76bb16524ba0caa310_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
7e85f5ba9c4c6e76bb16524ba0caa310_NeikiAnalytics
-
Size
651KB
-
MD5
7e85f5ba9c4c6e76bb16524ba0caa310
-
SHA1
71f11bf001d50cc40e79a705411848048bd67928
-
SHA256
f9812e187bd481ada21653a150e6ab51099d5571c38419bf1c305ac98d20f848
-
SHA512
d5bdc7fbe7f5e099eca7316c2534060480388a88b2bb8bfd48a9e0ea2c81334966f2ad0aca496ec951bc3e95dbecf48570606681a870a45e150f00c211bfc072
-
SSDEEP
12288:gMYcPqTFEgX4m+JA+X+o8oElkWk36CdXZfDGoMcpHOZH2USlXdZ:gMYcPkpSJfMoUQqCdX5DJcZH2UoXdZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e85f5ba9c4c6e76bb16524ba0caa310_NeikiAnalytics
Files
-
7e85f5ba9c4c6e76bb16524ba0caa310_NeikiAnalytics.exe windows:10 windows x86 arch:x86
d873ce2f5ec1f9c637b60736185d765f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetModuleFileNameA
IsDBCSLeadByteEx
GetStdHandle
WriteFile
lstrlenA
GetCommandLineA
IsValidCodePage
MultiByteToWideChar
LocalFileTimeToFileTime
GetLastError
FileTimeToSystemTime
GetVersionExA
GlobalAlloc
GlobalFree
FileTimeToLocalFileTime
GetProcAddress
ExitProcess
SystemTimeToFileTime
GetModuleHandleW
WideCharToMultiByte
CloseHandle
CreateFileW
FlushFileBuffers
VirtualQuery
GetSystemInfo
WriteConsoleW
SetStdHandle
LCMapStringW
GetStringTypeW
SetFilePointer
GetConsoleMode
GetConsoleCP
RtlUnwind
GetVersionExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetLastError
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
HeapCreate
HeapFree
VirtualFree
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapAlloc
OutputDebugStringA
GetACP
GetOEMCP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
Sleep
VirtualProtect
HeapReAlloc
VirtualAlloc
msi
ord7
ord20
ord8
ord151
ord148
ord152
ord77
ord91
user32
MessageBoxA
shlwapi
StrStrIA
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ole32
StringFromGUID2
CoInitialize
StgOpenStorage
CoUninitialize
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE