d:\Projects\WinRAR\rar\build\sfxcon32\Release\sfxcon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3d45bb08643383ce300b7f2ae2d2c52fb6e0de338bfc2346719152d9fcf8a8cf_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3d45bb08643383ce300b7f2ae2d2c52fb6e0de338bfc2346719152d9fcf8a8cf_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
3d45bb08643383ce300b7f2ae2d2c52fb6e0de338bfc2346719152d9fcf8a8cf_NeikiAnalytics
-
Size
124KB
-
MD5
ef960a73ec1e73a452eeff59b843bc40
-
SHA1
a61e2d496734e4baacee42d52958c38a85b90e3f
-
SHA256
3d45bb08643383ce300b7f2ae2d2c52fb6e0de338bfc2346719152d9fcf8a8cf
-
SHA512
d00986b40e1df5729781750257ff459da3c9f50f6adc8a2ce3bae8d17d025d35e38ebfd5d548b4481d5fb612258fabf8b7d5f4a1eb19a70ddb29f8e2f82f64da
-
SSDEEP
3072:k3288+l80hHs/Dti9t5elpADO/taa1hITqg:k35lvhM/Dti9t5MKDxa1h3g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d45bb08643383ce300b7f2ae2d2c52fb6e0de338bfc2346719152d9fcf8a8cf_NeikiAnalytics
Files
-
3d45bb08643383ce300b7f2ae2d2c52fb6e0de338bfc2346719152d9fcf8a8cf_NeikiAnalytics.exe windows:5 windows x86 arch:x86
f5bccbbf7f1a1d6e89398844e9ddb93c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetLastError
GetCurrentProcess
SetFileTime
MoveFileA
SetFilePointer
SetEndOfFile
GetFileType
CreateFileA
CreateFileW
ReadFile
WriteFile
GetDriveTypeA
GetFileAttributesA
GetFileAttributesW
SetFileAttributesA
SetFileAttributesW
DeleteFileA
DeleteFileW
CreateDirectoryA
CreateDirectoryW
CloseHandle
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetVersionExA
GetCommandLineA
SetErrorMode
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
CompareStringA
ExitProcess
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
IsDBCSLeadByte
GetCPInfo
Sleep
GetStdHandle
GetConsoleMode
SetConsoleMode
FindClose
ReadConsoleA
user32
CharToOemBuffA
CharUpperA
wvsprintfA
OemToCharA
CharToOemA
OemToCharBuffA
LoadStringA
advapi32
LookupPrivilegeValueA
OpenProcessToken
SetFileSecurityA
SetFileSecurityW
AdjustTokenPrivileges
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ