WsTraceDump.pdb
Static task
static1
Behavioral task
behavioral1
Sample
36697318d074ad49c13d8b7e89732b10_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
36697318d074ad49c13d8b7e89732b10_NeikiAnalytics.exe
-
Size
624KB
-
MD5
36697318d074ad49c13d8b7e89732b10
-
SHA1
d7b70c0c3487d1937084342990108a37d5b07083
-
SHA256
133ac3134118870b0eb0ca70708e3041cf5ca99ffa105342248817e35eafaf48
-
SHA512
e6c1a3dc98e3a72509e73957c375b9b67f49c8094ac3cde1e992d8c2aff83b350c661fbd2ae6f117cf9e890ce697363c6ea302d832e51de88a3a3ac44bb96329
-
SSDEEP
12288:cZsJlARaGdf1IrOrNhyRfLz707YH7lk9wl225CnPkKb5rdRYd:osvoKFLgYHJWwl24C15rDY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36697318d074ad49c13d8b7e89732b10_NeikiAnalytics.exe
Files
-
36697318d074ad49c13d8b7e89732b10_NeikiAnalytics.exe.exe windows:10 windows x64 arch:x64
f608678ac29c3efcf33101e9d4a5792f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetStdHandle
WaitForSingleObject
GetLastError
CloseHandle
CreateProcessW
GetConsoleOutputCP
GetUserDefaultUILanguage
GetLocaleInfoW
ConvertDefaultLocale
FreeLibrary
LoadLibraryExW
HeapSetInformation
GetVersionExW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
DecodePointer
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetProcAddress
WriteFile
GetModuleFileNameA
HeapCreate
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineW
OutputDebugStringA
EnterCriticalSection
LeaveCriticalSection
RtlUnwindEx
HeapAlloc
HeapFree
SetStdHandle
Sleep
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
MultiByteToWideChar
GetStringTypeW
LCMapStringW
WriteConsoleW
FlushFileBuffers
SetThreadStackGuarantee
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
CreateFileW
user32
LoadStringW
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE