C:\jdk7_32P\jdk7\build\windows-i586\tmp\beanreg\obj\beanreg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
18813a64be8a537fb6eff9bced540ba0_NeikiAnalytics.dll
Resource
win7-20240220-en
General
-
Target
18813a64be8a537fb6eff9bced540ba0_NeikiAnalytics.exe
-
Size
245KB
-
MD5
18813a64be8a537fb6eff9bced540ba0
-
SHA1
19ca5b7b8b2fad6c9645a16b39550e49e6e76cb0
-
SHA256
27a7b84922ad437cd39ab77b777b54f467643b808a2e1c5711b271672783dbde
-
SHA512
238d04ba8cae0773daaab6149d50abb20387696190614c88129d8c87cc6e6e9aaa9a6d586d61002acdb8416bb10806888528317bad34e5bfe84df8a620e8a42f
-
SSDEEP
6144:EN2OBq5R8dnE4Eu9vMiXRaEIxp8fw9KlmLk88CD1FBRONpO//q+XWO:EARgBBhup8womLkQ1FCCtXWO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18813a64be8a537fb6eff9bced540ba0_NeikiAnalytics.exe
Files
-
18813a64be8a537fb6eff9bced540ba0_NeikiAnalytics.exe.dll regsvr32 windows:5 windows x86 arch:x86
ca2f808d708943d9b0552b4176450216
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLastError
GetProcAddress
GetModuleHandleA
lstrlenA
lstrcmpiA
DisableThreadLibraryCalls
FindClose
FindFirstFileA
GetCommandLineA
GetModuleFileNameA
CloseHandle
WriteFile
SizeofResource
LoadResource
FindResourceA
CreateFileA
CreateDirectoryA
GetFileAttributesA
IsDBCSLeadByte
FreeLibrary
LoadLibraryExA
DeleteFileA
GetShortPathNameA
LocalAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
LoadLibraryA
user32
MessageBoxA
LoadStringA
wsprintfA
CharNextA
ole32
CoTaskMemFree
StringFromCLSID
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemRealloc
oleaut32
VarUI4FromStr
msvcr100
_mbsstr
_mbsicmp
_mbsnbicmp
malloc
free
_CxxThrowException
memcpy_s
printf
??_V@YAXPAX@Z
_resetstkoflw
__CxxFrameHandler3
_recalloc
??_U@YAPAXI@Z
memset
_except_handler4_common
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_mbsnbcpy_s
_mbsnbcat
??3@YAXPAX@Z
_mbsnbcpy
Exports
Exports
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 213KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ