C:\jdk7_32P\jdk7\build\windows-i586\tmp\npjp2\obj\npjp2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9e8ffbfef595cf129ad530e6867fd8f0_NeikiAnalytics.dll
Resource
win7-20240220-en
General
-
Target
9e8ffbfef595cf129ad530e6867fd8f0_NeikiAnalytics.exe
-
Size
278KB
-
MD5
9e8ffbfef595cf129ad530e6867fd8f0
-
SHA1
2f5c323429ca3714898fe7fe96a5f9f63f43cab2
-
SHA256
585c06f32af8841f59a912159f3347d9cc35f32e03eb3d663b6d9467036c1d70
-
SHA512
37c5d78272dceebe647fb240efa615ae2a33c75bc565c0b0b52695a58425810fb92d87ee6749bcff517ea331ac98ee5e857008125c9870c5615c2535c6dcb175
-
SSDEEP
6144:MlVOfVUcODMM4ScqyJNjuGZzfTYRtRD+E3ABjqDPQf7rMh4wnQq1GevQOUuctrWs:MlpQqjQOUuctfvGN2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e8ffbfef595cf129ad530e6867fd8f0_NeikiAnalytics.exe
Files
-
9e8ffbfef595cf129ad530e6867fd8f0_NeikiAnalytics.exe.dll windows:5 windows x86 arch:x86
c7e69f6c544e7fbf78947efb1b062e1d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
wsprintfA
GetWindowLongA
BeginPaint
FillRect
EndPaint
SetWindowLongA
CallWindowProcA
TranslateMessage
PeekMessageA
CallNextHookEx
MessageBoxA
UnhookWindowsHookEx
SetWindowsHookExA
RemovePropA
SetPropA
GetParent
IsWindow
GetPropA
DispatchMessageA
gdi32
GetDeviceCaps
GetObjectType
CreateEnhMetaFileA
CloseEnhMetaFile
PlayEnhMetaFile
DeleteEnhMetaFile
CreateSolidBrush
DeleteObject
StretchDIBits
msvcr100
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
_vsnprintf_s
_except_handler4_common
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_ftime64_s
strftime
_snprintf_s
_localtime64
_mbscmp
strcat_s
_splitpath_s
??_V@YAXPAX@Z
_CxxThrowException
memset
malloc
sprintf_s
free
sprintf
strstr
memcpy
strncpy
__CxxFrameHandler3
??3@YAXPAX@Z
??2@YAPAXI@Z
strtol
_errno
_stricmp
getenv
_vsnprintf
_snprintf
_stat64i32
_mbsicmp
_mbsrchr
_strdup
strcpy_s
?_type_info_dtor_internal_method@type_info@@QAEXXZ
kernel32
OutputDebugStringA
InterlockedDecrement
GetSystemTimeAsFileTime
GetCurrentProcessId
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetShortPathNameA
LocalFree
RaiseException
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
TerminateProcess
FormatMessageA
lstrlenA
LocalAlloc
GetSystemDirectoryA
GetVersionExA
GetModuleHandleA
WideCharToMultiByte
GetTempPathA
GetTempFileNameA
CreateFileA
WriteFile
CloseHandle
CreateProcessA
MultiByteToWideChar
GetCurrentThreadId
GetTickCount
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
FreeLibrary
GetLastError
AllocConsole
GetStdHandle
GetModuleFileNameA
WriteConsoleA
LoadLibraryA
GetLongPathNameA
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
ole32
CoTaskMemFree
StringFromCLSID
oleaut32
SysFreeString
SysAllocString
VariantClear
Exports
Exports
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
_Java_sun_plugin2_main_server_MozillaPlugin_allocateNPObject@20
_Java_sun_plugin2_main_server_MozillaPlugin_allocateVariantArray@12
_Java_sun_plugin2_main_server_MozillaPlugin_freeVariantArray@20
_Java_sun_plugin2_main_server_MozillaPlugin_getAuthentication0@36
_Java_sun_plugin2_main_server_MozillaPlugin_getCookie0@20
_Java_sun_plugin2_main_server_MozillaPlugin_getProxy0@20
_Java_sun_plugin2_main_server_MozillaPlugin_hookupApplet@24
_Java_sun_plugin2_main_server_MozillaPlugin_initServiceManager@8
_Java_sun_plugin2_main_server_MozillaPlugin_invokeLater0@20
_Java_sun_plugin2_main_server_MozillaPlugin_javaScriptGetWindow0@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnEvaluate@36
_Java_sun_plugin2_main_server_MozillaPlugin_npnGetIntIdentifier@12
_Java_sun_plugin2_main_server_MozillaPlugin_npnGetProperty@40
_Java_sun_plugin2_main_server_MozillaPlugin_npnGetStringIdentifier@12
_Java_sun_plugin2_main_server_MozillaPlugin_npnHasMethod@32
_Java_sun_plugin2_main_server_MozillaPlugin_npnHasProperty@32
_Java_sun_plugin2_main_server_MozillaPlugin_npnIdentifierIsString@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnIntFromIdentifier@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnInvoke@52
_Java_sun_plugin2_main_server_MozillaPlugin_npnReleaseObject@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnRemoveProperty@32
_Java_sun_plugin2_main_server_MozillaPlugin_npnRetainObject@16
_Java_sun_plugin2_main_server_MozillaPlugin_npnSetException@20
_Java_sun_plugin2_main_server_MozillaPlugin_npnSetProperty@40
_Java_sun_plugin2_main_server_MozillaPlugin_npnUTF8FromIdentifier@16
_Java_sun_plugin2_main_server_MozillaPlugin_setAppletStatus@20
_Java_sun_plugin2_main_server_MozillaPlugin_setCookie0@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIB@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIC@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JID@28
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIF@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JII@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIJ@28
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JILjava_lang_String_2@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIS@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElement0__JIZ@24
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElementToScriptingObject0@28
_Java_sun_plugin2_main_server_MozillaPlugin_setVariantArrayElementToVoid0@20
_Java_sun_plugin2_main_server_MozillaPlugin_showDocument0@24
_Java_sun_plugin2_main_server_MozillaPlugin_showStatus0@20
_Java_sun_plugin2_main_server_MozillaPlugin_variantArrayElementToObject0@28
_Java_sun_plugin2_main_server_ServerPrintHelper_isPrinterDC0@16
_Java_sun_plugin2_main_server_ServerPrintHelper_printBand0@56
_Java_sun_plugin2_main_server_WindowsHelper_installModalFilterHook@20
_Java_sun_plugin2_main_server_WindowsHelper_installMouseHook@20
_Java_sun_plugin2_main_server_WindowsHelper_runMessagePump0@28
_Java_sun_plugin2_main_server_WindowsHelper_uninstallHook@24
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 213KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ