c:\trees\mk\game\CoDSP.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d52e3ad7fdadba1ec03ed0e914c80d00_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d52e3ad7fdadba1ec03ed0e914c80d00_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
d52e3ad7fdadba1ec03ed0e914c80d00_NeikiAnalytics
-
Size
1.7MB
-
MD5
d52e3ad7fdadba1ec03ed0e914c80d00
-
SHA1
8d11f20da3b75b0b4ab4cd9166730c5a050396aa
-
SHA256
f98812ae6496ea4e43874ca897572941a3e493052abf604592c7c7d8b39a8b99
-
SHA512
7405eb27c9d9be0037da416a1c45d39bcc337d6f89cf2097371a520ace479d109a038ae8f55ade1170736bee2478724a786003a12f6aa1c61963ec8797c1c3f6
-
SSDEEP
49152:Pk7L+PjkT3klnwq++pyzxRyQroO4MVbBl8zivs48wfJfDqMfqDoTu:Pk7SPjm3+nwT+YdRdw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d52e3ad7fdadba1ec03ed0e914c80d00_NeikiAnalytics
Files
-
d52e3ad7fdadba1ec03ed0e914c80d00_NeikiAnalytics.exe windows:4 windows x86 arch:x86
e2d52dbaa5aaf6c910d6f208bef6268d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
winmm
midiInGetNumDevs
midiInOpen
joyGetDevCapsA
midiInStart
midiInGetDevCapsA
joyGetPosEx
midiInClose
timeEndPeriod
timeGetTime
timeBeginPeriod
joyGetNumDevs
mss32
_AIL_set_stream_playback_rate@8
_AIL_set_3D_sample_loop_count@8
_AIL_close_stream@4
_AIL_set_sample_volume_pan@12
_AIL_shutdown@0
_AIL_3D_sample_offset@4
_AIL_set_sample_reverb_levels@12
_AIL_resume_sample@4
_AIL_3D_sample_status@4
_AIL_allocate_sample_handle@4
_AIL_init_sample@4
_AIL_stop_sample@4
_AIL_stream_ms_position@12
_AIL_set_3D_room_type@8
_AIL_set_sample_loop_count@8
_AIL_set_sample_playback_rate@8
_AIL_set_stream_loop_count@8
_AIL_set_preference@8
_AIL_set_sample_ms_position@8
_AIL_start_3D_sample@4
_AIL_end_sample@4
_AIL_enumerate_3D_providers@12
_AIL_set_sample_adpcm_block_size@8
_AIL_set_3D_position@16
_AIL_allocate_3D_sample_handle@4
_AIL_set_3D_sample_offset@8
_AIL_open_stream@12
_AIL_set_3D_sample_playback_rate@8
_AIL_end_3D_sample@4
_AIL_set_3D_sample_volume@8
_AIL_stop_3D_sample@4
_AIL_3D_provider_attribute@12
_AIL_open_3D_provider@4
_AIL_resume_3D_sample@4
_AIL_3D_position@16
_AIL_stream_status@4
_AIL_sample_playback_rate@4
_AIL_load_sample_buffer@16
_AIL_sample_volume_pan@12
_AIL_minimum_sample_buffer_size@12
_AIL_sample_ms_position@12
_AIL_release_sample_handle@4
_AIL_set_DirectSound_HWND@8
_AIL_3D_sample_length@4
_AIL_set_redist_directory@4
_AIL_sample_buffer_ready@4
_AIL_3D_sample_playback_rate@4
_AIL_close_3D_provider@4
_AIL_stream_playback_rate@4
_AIL_set_file_callbacks@16
_AIL_start_stream@4
_AIL_stream_volume_pan@12
_AIL_set_sample_type@12
_AIL_last_error@0
_AIL_set_stream_volume_pan@12
_AIL_set_3D_distance_factor@8
_AIL_3D_sample_volume@4
_AIL_pause_stream@8
_AIL_set_sample_address@12
_AIL_set_3D_sample_info@8
_AIL_start_sample@4
_AIL_process_digital_audio@24
_AIL_WAV_info@8
_AIL_sample_status@4
_AIL_size_processed_digital_audio@16
_AIL_set_stream_reverb_levels@12
_AIL_set_3D_sample_distances@12
_AIL_open_digital_driver@16
_AIL_startup@0
_AIL_digital_CPU_percent@4
_AIL_set_3D_sample_effects_level@8
_AIL_set_digital_master_room_type@8
_AIL_sample_position@4
_AIL_set_stream_ms_position@8
ddraw
DirectDrawEnumerateExA
DirectDrawCreateEx
kernel32
CompareStringA
VirtualQuery
GetSystemInfo
VirtualProtect
GetOEMCP
GetACP
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
RaiseException
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
RtlUnwind
GetTimeZoneInformation
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
FatalAppExitA
DeleteCriticalSection
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
TlsAlloc
GetCurrentThread
TlsGetValue
TlsSetValue
GetCurrentThreadId
SetLastError
TlsFree
GetCommandLineA
CompareStringW
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
TerminateProcess
ExitProcess
GetFullPathNameA
CreateDirectoryA
FindNextFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
MoveFileA
GetSystemDirectoryA
SetEnvironmentVariableA
InitializeCriticalSection
SetStdHandle
GetTickCount
GetFileAttributesA
SetFileAttributesA
GlobalMemoryStatus
FreeLibrary
QueryPerformanceCounter
Sleep
GetProcAddress
LoadLibraryA
GetModuleHandleA
QueryPerformanceFrequency
CreateFileA
SetErrorMode
GlobalSize
GlobalLock
WaitForSingleObject
SetThreadExecutionState
IsBadReadPtr
FormatMessageA
WriteFile
GetDriveTypeA
OpenProcess
CreateProcessA
ReadFile
GlobalUnlock
Module32First
GetLastError
CopyFileA
GetTempFileNameA
GetModuleFileNameA
GetCurrentDirectoryA
CreateToolhelp32Snapshot
Module32Next
GetVersionExA
CloseHandle
GetCurrentProcessId
GetTempPathA
DeleteFileA
MulDiv
SetEndOfFile
SetConsoleCtrlHandler
GetLocaleInfoW
SetEnvironmentVariableW
SetUnhandledExceptionFilter
GetStartupInfoA
IsBadCodePtr
user32
ShowCursor
SetCapture
GetWindowRect
OpenClipboard
DispatchMessageA
ShowWindow
PeekMessageA
GetClipboardData
GetForegroundWindow
TranslateMessage
SetFocus
wsprintfA
CloseClipboard
GetMessageA
RegisterClassA
LoadCursorA
UpdateWindow
LoadImageA
SetWindowPos
DefWindowProcA
SendMessageA
LoadIconA
AdjustWindowRect
SetCursorPos
CloseWindow
SetWindowTextA
GetDesktopWindow
ReleaseDC
InvalidateRect
SetWindowLongA
GetWindowTextA
PostQuitMessage
SetTimer
RegisterHotKey
UnregisterHotKey
SystemParametersInfoA
GetWindowLongA
MapVirtualKeyA
RegisterWindowMessageA
ClipCursor
ReleaseCapture
GetSystemMetrics
DestroyWindow
GetDC
MessageBoxA
CreateWindowExA
CallWindowProcA
MoveWindow
ChangeDisplaySettingsA
EnumDisplaySettingsA
SetForegroundWindow
GetCursorPos
gdi32
SwapBuffers
GetDeviceGammaRamp
DescribePixelFormat
SetTextColor
CreateSolidBrush
SetBkColor
GetDeviceCaps
DeleteDC
SetDeviceGammaRamp
SetPixelFormat
CreateFontA
ChoosePixelFormat
advapi32
GetUserNameA
shell32
ShellExecuteA
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 192KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 18.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 204KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE