rundll32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6222406cfc74978b318aa925343a2100_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6222406cfc74978b318aa925343a2100_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
6222406cfc74978b318aa925343a2100_NeikiAnalytics.exe
-
Size
60KB
-
MD5
6222406cfc74978b318aa925343a2100
-
SHA1
c4472046f44b3045d76fe3d8ed693e4d6ebbfbe2
-
SHA256
fb38f869c42dacd2c8d68a3c58056f0432ebae056ada5e18873bf5c110fa9bbd
-
SHA512
16e2e27c230153f717e9ca000b871e09d6ee3b8d3dc3aa5be5194c5732fc75ee29b904e87df43116c11e8d3acd49fe8dcd8ca00fa1057681da03d1c466ddbb0e
-
SSDEEP
1536:Rq+bln5IUmDjoX8O7CTQZMOCsrPsRMY8pCux22:Rxbln5IvOlWOHC68ux
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6222406cfc74978b318aa925343a2100_NeikiAnalytics.exe
Files
-
6222406cfc74978b318aa925343a2100_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
fa4d86a4e89ae79ea2a222aeb8f63583
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_except_handler3
_wtoi
_vsnwprintf
kernel32
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetErrorMode
DeactivateActCtx
GetCurrentProcessId
GetFileAttributesW
SearchPathW
CreateActCtxW
ActivateActCtx
LoadLibraryW
ReleaseActCtx
LocalAlloc
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CloseHandle
SetFilePointer
ReadFile
CreateFileW
WaitForSingleObject
CreateProcessW
Wow64EnableWow64FsRedirection
lstrcpynW
GetSystemDirectoryW
GetNativeSystemInfo
IsWow64Process
GetCurrentProcess
GetCommandLineW
FreeLibrary
LocalFree
lstrlenA
WideCharToMultiByte
GetLastError
lstrlenW
GetProcAddress
FormatMessageW
GetSystemTimeAsFileTime
gdi32
GetStockObject
user32
CharNextW
SetClassLongW
LoadIconW
DefWindowProcW
CreateWindowExW
RegisterClassW
LoadCursorW
DestroyWindow
MessageBoxW
LoadStringW
imagehlp
ImageDirectoryEntryToData
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 884B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE