MsiCert.pdb
Static task
static1
Behavioral task
behavioral1
Sample
85988fbda9044c6ae8719626e26202f0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
85988fbda9044c6ae8719626e26202f0_NeikiAnalytics
-
Size
627KB
-
MD5
85988fbda9044c6ae8719626e26202f0
-
SHA1
04b70c0c81932246736bf9970afa3e6010a84845
-
SHA256
1b99d61c1dd6fd036ff88f91413190a13bc20f6cde5df9bdc9ca1b62516ed5c3
-
SHA512
7704042ac340f923f2dfae8223d69433731f2266fec5a3138f7ee60e76e2ea03dac27fdfa9281c9856018ab4e5d28e9100a0d01697e2c9c9887968e4170e74ef
-
SSDEEP
12288:B40mJ9fLMALSxraoNYSRaLL5e6aZvHdVgIvpkSQyTiy9xj9vQwqNH3IJ:B40mrIISxraoFg5CvHXpD75XBYwqNHY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85988fbda9044c6ae8719626e26202f0_NeikiAnalytics
Files
-
85988fbda9044c6ae8719626e26202f0_NeikiAnalytics.exe windows:10 windows x86 arch:x86
2a9e8ef4b4a8386ba6d1261855062bd7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetTempPathA
GetLastError
CreateFileA
DeleteFileA
GlobalAlloc
GlobalFree
CloseHandle
GetProcAddress
GetModuleHandleW
GetTempFileNameA
CreateFileW
VirtualQuery
WriteFile
FlushFileBuffers
WriteConsoleW
SetStdHandle
LCMapStringW
MultiByteToWideChar
GetStringTypeW
SetFilePointer
GetSystemInfo
GetModuleFileNameA
GetCommandLineA
GetVersionExW
SetUnhandledExceptionFilter
SetLastError
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
LoadLibraryExW
GetStdHandle
HeapCreate
HeapFree
VirtualFree
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
OutputDebugStringA
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
Sleep
VirtualProtect
HeapReAlloc
VirtualAlloc
RtlUnwind
GetConsoleCP
GetConsoleMode
msi
ord122
ord163
ord124
ord31
ord159
ord160
ord91
ord121
ord8
ord17
ord158
ord20
ord223
ord164
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
crypt32
CertFreeCertificateContext
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE