C:\WINCE500\PBWorkspaces\Test_Image\WINCE500\ICOP_Vortex86_50B_x86\cesysgen\oak\target\x86\debug\voipui.pdb
Static task
static1
Behavioral task
behavioral1
Sample
88ef570116de5570eeacc66e6d36ea50_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
88ef570116de5570eeacc66e6d36ea50_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
88ef570116de5570eeacc66e6d36ea50_NeikiAnalytics
-
Size
600KB
-
MD5
88ef570116de5570eeacc66e6d36ea50
-
SHA1
90c0b6a9ed9a40bd2f5133d897eee789d15a9bef
-
SHA256
8f032653d80305bd49060564da74e9c63ab7a62ed93d2a88d6282a9754063178
-
SHA512
54ad1b8461611e346fd99ed21bfeeade5a55969e1519b49853cab8d5a14e8905f574c383883ff2817ad6918fd298393234332cc20b318640127225a65b5bec6e
-
SSDEEP
12288:Fu1kTbo0WFfaPO7S8VXgooPJ4pNnt2Hs:FH4ntm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88ef570116de5570eeacc66e6d36ea50_NeikiAnalytics
Files
-
88ef570116de5570eeacc66e6d36ea50_NeikiAnalytics.exe windows:4 windows x86 arch:x86
7797bfa75fa2d922ee0bf9817069bee4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
coredll
ord1645
ord84
ord36
ord86
ord2002
ord2007
ord20
ord2005
ord69
ord167
ord181
ord180
ord19
ord262
ord263
ord864
ord195
ord378
ord922
ord918
ord905
ord35
ord34
ord897
ord203
ord898
ord23
ord272
LocalAllocTrace
ord553
ord556
ord858
ord1096
ord497
ord1095
ord516
ord545
ord555
ord546
ord1044
ord2
ord45
ord1094
ord3
ord884
ord1018
ord197
ord535
ord702
ord286
ord264
ord259
ord258
ord1043
ord866
ord246
ord95
ord875
ord876
ord1884
ord50
ord66
ord230
ord865
ord835
ord826
ord836
ord1093
ord2039
ord496
ord868
ord705
ord193
ord859
ord870
ord861
ord265
ord911
ord935
ord919
ord909
ord1092
ord456
ord461
ord455
ord463
ord63
ord464
ord1882
ord1879
ord1878
ord59
ord1046
ord541
ord168
ord179
ord492
ord495
ord494
ord498
ord1047
ord266
ord271
ord247
ord704
ord249
ord250
ord517
ord234
ord256
ord1065
ord1072
ord1828
ord682
ord683
ord874
ord1763
ord945
ord910
ord202
ord269
ord196
ord1071
ord65
ord61
ord60
ord194
ord229
ord1508
ord1514
ord1518
ord1068
ord729
ord912
ord873
ord895
ord916
ord78
ord56
ord5
ord878
ord4
ord1054
ord267
ord285
ord692
ord508
ord1781
ord921
ord903
ord924
ord923
ord906
ord940
ord941
ord931
ord926
ord902
ord257
ord276
ord260
ord261
ord248
ord1398
ord968
ord980
ord969
ord103
ord274
ord2006
ole32
CoCreateInstance
CoInitializeEx
CoUninitialize
oleaut32
SysFreeString
SysAllocString
voiplap
AttemptConnection
SetPCSyncName
VerifyUser
secur32
FreeCredentialsHandle
InitSecurityInterfaceW
ws2
sethostname
iphlpapi
GetAdaptersInfo
netapi32
DsGetDcNameW
NetApiBufferFree
urlmon
UrlMkSetSessionOption
wininet
InternetSetOptionW
commctrl
ord2
Sections
.text Size: 386KB - Virtual size: 386KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ