D:\svn\KMSCC\kms-c\CMakeFiles\CMakeTmp\Debug\cmTryCompileExec1386033624.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d96f1e5f475be53057f6f5b0a1e7d4f0_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
d96f1e5f475be53057f6f5b0a1e7d4f0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
d96f1e5f475be53057f6f5b0a1e7d4f0_NeikiAnalytics.exe
-
Size
29KB
-
MD5
d96f1e5f475be53057f6f5b0a1e7d4f0
-
SHA1
163dba57eefe241f48ad8875ae09608f531d6545
-
SHA256
b1f12952fe0fd81abce3165275fbb86b16fe3aa2bf8c9aec0d88283c755e7509
-
SHA512
4bea7851c584e909d82b8448a45110f34913b23ebe6eda977a15c5c46787417f3a10a5b4995310ea692770500fc1c91a8980eceb88e358969857fe87fa8270cc
-
SSDEEP
192:2UHkYzl2jS9j3TfLeIiwTc3IHnf3B3gyVK2ZIJEGLipxau5AuH1xrqT4:/H/9jHeyf3hiMIJEpnHRp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d96f1e5f475be53057f6f5b0a1e7d4f0_NeikiAnalytics.exe
Files
-
d96f1e5f475be53057f6f5b0a1e7d4f0_NeikiAnalytics.exe.exe windows:6 windows x86 arch:x86
532775cbe326b3e8704870c28cd1a3d0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcr110d
_invoke_watson
_controlfp_s
_except_handler4_common
_onexit
_wmakepath_s
_wsplitpath_s
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__dllonexit
_calloc_dbg
_unlock
_lock
__crtSetUnhandledExceptionFilter
?terminate@@YAXXZ
_commode
_fmode
__initenv
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
exit
_CrtSetCheckCount
_CrtDbgReportW
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
wcscpy_s
_CRT_RTC_INITW
kernel32
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryW
lstrlenA
LoadLibraryExW
GetProcAddress
GetLastError
RaiseException
IsDebuggerPresent
DecodePointer
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
EncodePointer
IsProcessorFeaturePresent
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ