E:\ydd\program\final\Debug\final.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2282cd7ff438f64c87131b2507d75c10_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2282cd7ff438f64c87131b2507d75c10_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
2282cd7ff438f64c87131b2507d75c10_NeikiAnalytics.exe
-
Size
143KB
-
MD5
2282cd7ff438f64c87131b2507d75c10
-
SHA1
01ff6637e1ab8eb25124b521cb018e83648c1ee1
-
SHA256
5105b16d4f09ab7c0da1211462021286dac957629c25d725f9f664f4a56d1677
-
SHA512
6d94f0d70cba385efb54976614161683bb8319cd1456e3f8633e223fdcadb5084cdb7b5ffaa457d0887bd31fc56735ab80f3afec11ad74969f329e26f397e9b4
-
SSDEEP
1536:2Z2xBM7rzh4vLvoBah0VPRS22QwQru5psyRUBFnyQOI:F0tJuQ8DRUvTOI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2282cd7ff438f64c87131b2507d75c10_NeikiAnalytics.exe
Files
-
2282cd7ff438f64c87131b2507d75c10_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
fb696cc884967c78064c788ac58dbc46
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
winmm
PlaySoundA
opengl32
glVertex3f
glBegin
glLoadIdentity
glMatrixMode
glViewport
glHint
glDepthFunc
glEnable
glClearDepth
glClearColor
glShadeModel
glPopMatrix
glEnd
wglCreateContext
wglMakeCurrent
wglDeleteContext
glRasterPos2f
glGenLists
wglGetCurrentDC
wglUseFontBitmapsA
glCallList
glGenTextures
glTexImage2D
glTexParameteri
glIsEnabled
glMaterialfv
glMaterialf
glNormal3fv
glVertex3fv
glClear
glBlendFunc
glPushMatrix
glColor3f
glDisable
glTexCoord2f
glBindTexture
glTranslatef
glVertex3d
glTexCoord2d
glDepthMask
glRotatef
glu32
gluBuild2DMipmaps
gluCylinder
gluLookAt
gluNewQuadric
gluQuadricNormals
gluQuadricTexture
gluPerspective
glut32
glutMainLoop
glutReshapeFunc
glutIdleFunc
glutKeyboardFunc
glutDisplayFunc
glutCreateWindow
glutInitWindowPosition
glutInitWindowSize
glutInitDisplayMode
glutInit
glutPostRedisplay
glutSwapBuffers
msvcp100d
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?fail@ios_base@std@@QBE_NXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_BADOFF@std@@3_JB
??1_Lockit@std@@QAE@XZ
?width@ios_base@std@@QBE_JXZ
?_Debug_message@std@@YAXPB_W0I@Z
??1_Container_base12@std@@QAE@XZ
??0_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??Bid@locale@std@@QAEIXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??3@YAXPAXABU_DebugHeapTag_t@std@@PADH@Z
??2@YAPAXIABU_DebugHeapTag_t@std@@PADH@Z
?_DebugHeapTag_func@std@@YAABU_DebugHeapTag_t@1@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?width@ios_base@std@@QAE_J_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
??0_Lockit@std@@QAE@H@Z
msvcr100d
fwrite
fputc
_unlock_file
memcpy_s
fgetc
fgetpos
_fseeki64
fsetpos
setvbuf
fflush
memmove
fclose
memset
_invalid_parameter
_CrtDbgReportW
_CxxThrowException
free
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
rand
sqrt
sin
_purecall
fopen
malloc
sscanf
vsprintf
_CRT_RTC_INITW
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_amsg_exit
__getmainargs
_exit
_XcptFilter
_cexit
__initenv
_CrtSetCheckCount
_initterm
_initterm_e
_unlock
__dllonexit
_lock
_onexit
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_controlfp_s
_invoke_watson
_except_handler4_common
_lock_file
strncmp
memcpy
strcpy
??_V@YAXPAX@Z
??2@YAPAXI@Z
??3@YAXPAX@Z
strlen
__CxxFrameHandler3
exit
ungetc
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LoadLibraryW
GetProcAddress
IsProcessorFeaturePresent
HeapFree
HeapAlloc
GetProcessHeap
GetModuleFileNameW
VirtualQuery
FreeLibrary
lstrlenA
RaiseException
MultiByteToWideChar
IsDebuggerPresent
WideCharToMultiByte
DecodePointer
HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
EncodePointer
GetModuleHandleA
GetVersionExA
Sleep
CreateFileMappingA
MapViewOfFile
LocalAlloc
LocalFree
UnmapViewOfFile
CreateFileW
CreateFileA
SetFilePointer
ReadFile
CloseHandle
ExitProcess
user32
PostMessageA
SetSysColors
InvalidateRect
GetCursorPos
GetSysColor
ReleaseDC
DefWindowProcA
SetCapture
ReleaseCapture
GetKeyState
EndPaint
BeginPaint
PostQuitMessage
ShowWindow
GetDC
GetWindowRect
CreateWindowExA
CreateWindowExW
AdjustWindowRect
RegisterClassA
RegisterClassW
LoadCursorA
LoadIconA
GetSystemMetrics
GetClientRect
PeekMessageA
GetMessageA
DispatchMessageA
wsprintfA
GetFocus
MessageBoxA
TranslateMessage
DestroyWindow
gdi32
SetPaletteEntries
SetPixelFormat
UnrealizeObject
GetPixelFormat
DescribePixelFormat
ChoosePixelFormat
CreatePalette
SelectPalette
RealizePalette
GetStockObject
GetPaletteEntries
SetSystemPaletteUse
SwapBuffers
CreateCompatibleDC
CreateDIBSection
SelectObject
SetDIBits
GdiFlush
DeleteDC
DeleteObject
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ