pvk2pfx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2e95d5f3469229263b2e5a4f860bb390_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
General
-
Target
2e95d5f3469229263b2e5a4f860bb390_NeikiAnalytics.exe
-
Size
1.1MB
-
MD5
2e95d5f3469229263b2e5a4f860bb390
-
SHA1
fde72203e4fd50038a6222aff553a2f804c0f431
-
SHA256
800f831d6e8aeeebd21ffa31bab97e9145ef27195732be1b764f978737633e1c
-
SHA512
e3e684c52019e29d5b814f407a4528653aff5ead98b6c92a88fee8905d7b92a7c4caa4acc741482c52f7858c28f7fc5ec47d239f9327809e3f9d81d11f447c85
-
SSDEEP
12288:i+Xq1gYgR+8DAoczI2ZfnwlQTePINayz+ByIne7xmmZjIUTSl+0/1:DMdIuwe3zfIe7xmvH/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e95d5f3469229263b2e5a4f860bb390_NeikiAnalytics.exe
Files
-
2e95d5f3469229263b2e5a4f860bb390_NeikiAnalytics.exe.exe windows:10 windows x86 arch:x86
cbed8978bd13d078156b76651a089815
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
CryptReleaseContext
CryptGetProvParam
CryptImportKey
CryptDestroyHash
CryptHashData
CryptDeriveKey
CryptCreateHash
CryptAcquireContextW
CryptDestroyKey
kernel32
GetModuleHandleW
HeapSetInformation
GetConsoleWindow
GetCurrentProcess
UnhandledExceptionFilter
GetFileSize
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
GetProcessHeap
GetTickCount
LocalFree
CloseHandle
GetLastError
FormatMessageW
MultiByteToWideChar
TerminateProcess
CreateFileW
LocalAlloc
WriteFile
ReadFile
WideCharToMultiByte
msvcrt
_except_handler4_common
_controlfp
_initterm
__setusermatherr
__p__fmode
_cexit
_exit
exit
__set_app_type
__iob_func
__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
vfwprintf
fprintf
_wcsicmp
_vsnwprintf
?terminate@@YAXXZ
memset
user32
SetWindowLongW
SendDlgItemMessageW
GetDlgItemTextW
SetDlgItemTextW
LoadStringW
EndDialog
GetWindowLongW
DialogBoxParamW
crypt32
CertFreeCertificateContext
CertEnumCertificatesInStore
CertCloseStore
PFXExportCertStoreEx
CertSetCertificateContextProperty
CertOIDToAlgId
CertOpenStore
CertComparePublicKeyInfo
CryptExportPublicKeyInfo
cryptui
CryptUIWizExport
rpcrt4
UuidCreate
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE