C:\Users\Administrator\Desktop\now\ChartDirector\mfcdemocopy\bin\Debug\realtimetrack.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5b60e6b6ffc0b5af84606fc5e828f440_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
5b60e6b6ffc0b5af84606fc5e828f440_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
5b60e6b6ffc0b5af84606fc5e828f440_NeikiAnalytics.exe
-
Size
271KB
-
MD5
5b60e6b6ffc0b5af84606fc5e828f440
-
SHA1
f70ea43938fdb984fb9bdfe072a6c06851d1f1c1
-
SHA256
ea93caaf117ec747b3a3c68c9992ae89b7491f4c5b383b13b183ef911daf4bde
-
SHA512
86dfdcc2d4c609462ba3bfe90c00f49149f86f33ac73a13aed4de4006f364d03ae915036fd21e3a590c207d9b8039880eea8374a768e891d5c6825b9c2d666d7
-
SSDEEP
3072:m/LR8gkuyiiUAfVdaP/1W102PJMNZCaPSIJKlNcP/AKeg6EPgMdr:QR8gkulbAfVRpJsPSmPpeg6EPJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b60e6b6ffc0b5af84606fc5e828f440_NeikiAnalytics.exe
Files
-
5b60e6b6ffc0b5af84606fc5e828f440_NeikiAnalytics.exe.exe windows:6 windows x86 arch:x86
1da9f61e1107121595ef5804f3fd69ea
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
chartdir60
CChart_chartTime
CXYChart_getLayerCount
CXYChart_getLayerByZ
CXYChart_addLineLayer2
CXYChart_setClipping
CXYChart_getPlotArea
CXYChart_setPlotArea
CXYChart_getNearestXValue
CXYChart_getYCoor
CXYChart_getXCoor
CXYChart_xAxis
CXYChart_yAxis
XYChart2BaseChart
CXYChart_create
CPlotArea_getBottomY
CPlotArea_getRightX
CPlotArea_getWidth
CPlotArea_getTopY
CPlotArea_getLeftX
LineLayer2Layer
CLayer_getXIndexOf
CLayer_setXData
CLayer_getDataSetCount
CLayer_getDataSetByZ
CLayer_addDataSet
CDataSet_getLegendIcon
CDataSet_getUseYAxis
CDataSet_getDataColor
CDataSet_getDataName
CDataSet_getPosition
CDataSet_getValue
CAxis_getFormattedLabel
CAxis_setDateScale
CAxis_setTickDensity
CAxis_setWidth
CAxis_setTitle
CAxis_setLabelFormat
CBaseChart_initDynamicLayer
CBaseChart_formatValue
CBaseChart_getLegend
CBaseChart_addTitle
LegendBox2TextBox
CTextBox_setFontSize
TextBox2Box
CBox_setBackground
Box2DrawObj
CDrawArea_dashLineColor
CDrawArea_text3
CDrawArea_circle
CDrawArea_vline
CTTFText_draw
CTTFText_destroy
CChart_glassEffect
CViewPortControlBase_setProperty
CViewPortControlBase_getProperty
CViewPortControlBase_isOnPlotArea
CViewPortControlBase_paintViewPort
CViewPortControlBase_handleMouseMove
CViewPortControlBase_handleMouseUp
CViewPortControlBase_handleMouseDown
CViewPortControlBase_setViewPortManager
CViewPortControlBase_setChart
CViewPortControlBase_destroy
CViewPortControlBase_create
CViewPortManager_inExtendedPlotArea
CViewPortManager_commitPendingSyncAxis
CViewPortManager_dragTo
CViewPortManager_startDrag
CViewPortManager_zoomAround
CViewPortManager_zoomTo
CViewPortManager_zoomAt
CViewPortManager_canZoomOut
CViewPortManager_canZoomIn
CViewPortManager_validateViewPort
CViewPortManager_inPlotArea
CViewPortManager_getPlotAreaHeight
CViewPortManager_getPlotAreaWidth
CViewPortManager_getPlotAreaTop
CViewPortManager_getPlotAreaLeft
CViewPortManager_setChartMetrics
CViewPortManager_destroy
CViewPortManager_create
CImageMapHandler_getValue
CImageMapHandler_getHotSpot
CImageMapHandler_destroy
CImageMapHandler_create
CBaseChart_removeDynamicLayer
CBaseChart_getChartMetrics
CBaseChart_makeChart3
CBaseChart_makeChart2
CDrawArea_destroy
CBaseChart_setTransparentColor
CBaseChart_destroy
CBaseChart_setRoundedFrame
mfc120d
ord12012
ord8998
ord1087
ord1594
ord9416
ord8120
ord2978
ord5098
ord11881
ord6863
ord14879
ord13972
ord14022
ord12068
ord9707
ord5446
ord14012
ord14004
ord7062
ord4439
ord7588
ord16991
ord7589
ord16992
ord7587
ord16990
ord9419
ord14383
ord16781
ord13713
ord13712
ord2328
ord9360
ord14898
ord4703
ord4764
ord11020
ord16916
ord9338
ord16918
ord14394
ord14393
ord2841
ord6345
ord9842
ord14811
ord9925
ord10025
ord489
ord9966
ord8839
ord15679
ord2286
ord15458
ord15062
ord15364
ord9706
ord6116
ord4840
ord12725
ord7009
ord6290
ord6089
ord16396
ord316
ord16605
ord7013
ord385
ord1171
ord6423
ord2575
ord9212
ord1666
ord306
ord3539
ord7066
ord311
ord10343
ord7799
ord13925
ord12702
ord13093
ord4705
ord3963
ord3702
ord3701
ord7409
ord15898
ord3266
ord10755
ord13926
ord10854
ord10828
ord4982
ord2882
ord13388
ord12106
ord8841
ord11041
ord4282
ord13881
ord1215
ord1173
ord389
ord1564
ord1050
ord1169
ord379
ord493
ord8464
ord4867
ord7411
ord15902
ord3850
ord3847
ord9698
ord3267
ord11917
ord11919
ord11918
ord11916
ord11920
ord6703
ord13437
ord13438
ord10751
ord13838
ord4423
ord13660
ord16911
ord10573
ord5338
ord3043
ord4685
ord8302
ord12688
ord10875
ord3805
ord16049
ord14031
ord14029
ord1961
ord1973
ord1981
ord1977
ord1986
ord5818
ord5859
ord5826
ord5838
ord5834
ord5830
ord5867
ord5855
ord5822
ord5871
ord5844
ord5806
ord5813
ord5848
ord5350
ord11318
ord5336
ord3585
ord16919
ord9339
ord16917
ord8141
ord13429
ord15833
ord7089
ord3174
ord13874
ord4542
ord3924
ord3923
ord3804
ord13921
ord6182
ord6583
ord6860
ord10972
ord6553
ord6889
ord6185
ord6411
ord6164
ord9095
ord9096
ord9086
ord6409
ord9711
ord11886
ord10827
ord5101
ord2981
ord15122
ord8098
ord14979
ord4196
ord3796
ord16501
ord10416
ord1217
ord10650
ord10294
ord16884
ord9545
ord9872
ord14490
ord6356
ord1669
ord1643
ord1635
ord8295
ord14395
ord13973
ord4558
ord3068
ord8129
ord15046
ord5974
ord3002
ord1167
ord371
ord5977
ord3830
ord1212
ord481
ord1507
ord960
ord12365
ord12323
ord15358
ord13056
ord2538
ord9987
ord12481
ord1875
ord16865
ord2323
ord15607
ord6420
ord7506
ord15075
ord9886
ord16295
ord11090
ord15287
ord8999
ord1168
ord378
ord1648
ord10365
ord1989
ord1582
ord1072
ord1138
ord322
ord1567
ord1053
ord270
ord267
ord1633
ord1641
ord2468
ord2567
ord2758
ord3964
msvcr120d
_recalloc
memmove_s
_setmbcp
free
memset
__CxxFrameHandler3
_lock
_unlock
_calloc_dbg
__dllonexit
_onexit
??1type_info@@UAE@XZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
_CrtSetCheckCount
exit
_exit
_CxxThrowException
_cexit
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_acmdln
_fmode
_commode
?terminate@@YAXXZ
_CRT_RTC_INITW
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_vsnprintf_s
_time64
sprintf
_purecall
_invalid_parameter
sin
cos
_controlfp_s
_wmakepath_s
strtol
memmove
labs
memcpy
swprintf_s
wcscpy_s
_CrtDbgReportW
_wsplitpath_s
strlen
kernel32
FreeLibrary
GetModuleHandleW
VirtualQuery
LoadLibraryExW
GetSystemTimeAsFileTime
OutputDebugStringW
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
LoadLibraryW
GetProcAddress
GetModuleHandleA
GetModuleFileNameW
SetLastError
OutputDebugStringA
DeleteCriticalSection
DecodePointer
EnterCriticalSection
HeapSize
GetLastError
RaiseException
LeaveCriticalSection
HeapDestroy
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
WriteFile
TerminateThread
CreateThread
PurgeComm
SetCommMask
SetupComm
SetCommState
SetCommTimeouts
GetCommState
CloseHandle
CreateFileA
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
GetLocalTime
ReadFile
user32
SetCursor
DestroyCursor
LoadImageA
UnregisterClassA
CreateCursor
TrackMouseEvent
ReleaseCapture
GetSystemMetrics
gdi32
DeleteDC
DeleteObject
GetObjectA
CreateDIBSection
msimg32
AlphaBlend
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
oleaut32
SysFreeString
gdiplus
GdiplusShutdown
msvcp120d
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Debug_message@std@@YAXPB_W0I@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
??0_Container_base12@std@@QAE@XZ
??1_Container_base12@std@@QAE@XZ
?_Getpfirst@_Container_base12@std@@QBEPAPAU_Iterator_base12@2@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
??0id@locale@std@@QAE@I@Z
?good@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
Sections
.text Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ