muirct.pdb
Static task
static1
General
-
Target
90b84683d62158d7e9232dcf0dcc32b0_NeikiAnalytics
-
Size
1.6MB
-
MD5
90b84683d62158d7e9232dcf0dcc32b0
-
SHA1
23a29bc184106d7282ddd49759bc860b910cfea2
-
SHA256
f4bc2a3a369450fb86da1eec395bee42df10755a7ddbd1ce3fc8634a9c7ba4dd
-
SHA512
ab1c9226e0e3f95aa5a0f64c96122fe7f2481e419b3a4410b76f8e325597c464fd35531e4eee747e18ac3bc0967942f30dc384aa83593ea0192044626d3cc8b3
-
SSDEEP
12288:U7hU1vpyJbUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8:wU1Ebatr0zAiX90z/F0jsFB3SQk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 90b84683d62158d7e9232dcf0dcc32b0_NeikiAnalytics
Files
-
90b84683d62158d7e9232dcf0dcc32b0_NeikiAnalytics.exe windows:10 windows x64 arch:x64
3064221fc9208288e0016821c0f93774
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
advapi32
IsTextUnicode
kernel32
CreateDirectoryW
SizeofResource
LocalAlloc
GetFileAttributesW
SetFileAttributesW
GetLastError
LockResource
DeleteFileW
HeapSetInformation
LoadResource
LocalFree
FreeLibrary
CopyFileW
LoadLibraryExW
HeapCreate
HeapFree
HeapAlloc
HeapDestroy
GetProcessHeap
FormatMessageW
GetFullPathNameW
EnumResourceTypesW
WriteFile
EnumResourceNamesW
CreateFileW
GetVersionExW
UnmapViewOfFile
CloseHandle
EnumResourceLanguagesW
LoadLibraryW
FindResourceExW
UpdateResourceW
GetProcAddress
GetModuleHandleW
BeginUpdateResourceW
CreateFileMappingW
MapViewOfFile
ReadFile
GetFileSizeEx
MultiByteToWideChar
Sleep
VirtualProtect
GetTempFileNameW
_lread
MoveFileExW
GlobalLock
GlobalFree
_llseek
GetTempPathW
SetLastError
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
OutputDebugStringA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GlobalUnlock
_lwrite
_lclose
msvcrt
_exit
_cexit
__setusermatherr
_initterm
_errno
_fmode
_commode
?terminate@@YAXXZ
_lock
_unlock
__dllonexit
_onexit
memcpy
memset
__wgetmainargs
memcmp
exit
_amsg_exit
_XcptFilter
_CxxThrowException
__set_app_type
_callnewh
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
__CxxFrameHandler
??1type_info@@UEAA@XZ
bsearch
wcsncpy
__iob_func
wcsncmp
towupper
_wcsnicmp
wcsstr
strncmp
strtoul
wcschr
toupper
towlower
_vsnwprintf
malloc
free
fwprintf
vfwprintf
wcsrchr
_purecall
wcstoul
_wcsicmp
__C_specific_handler
wcscmp
imagehlp
MapFileAndCheckSumW
bcrypt
BCryptHashData
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptDestroyHash
BCryptCreateHash
user32
CharLowerW
ntdll
RtlLookupFunctionEntry
RtlAllocateHeap
RtlFreeHeap
RtlCaptureContext
RtlVirtualUnwind
Sections
.text Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE