C:\jenkins\workspace\CSDD\MIX_stream_app_client_win\build\stream_app\stream_app.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6c40b77a567223b5080e8e528bce3dd0_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
6c40b77a567223b5080e8e528bce3dd0_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
6c40b77a567223b5080e8e528bce3dd0_NeikiAnalytics.exe
-
Size
502KB
-
MD5
6c40b77a567223b5080e8e528bce3dd0
-
SHA1
462c35c00229ef268a196b452769320fa238eefe
-
SHA256
d125309a7101bd2475d02d0ca0cf0e285e81957abbb251b93cd4699bb7961dc5
-
SHA512
cab14393441e1c3a3ef1b1f658a151b65cfbb368d776e6e5c9537e19e05103d02c27a6259c977b1eae82aa79f3a33afc850ea02665c5d82a000f8ec93b63fa21
-
SSDEEP
6144:g4rU02OGp7c1G24kiFV11Pc343RfNIW58tQuH8QuBRmloMkU:jrUXtcukSP1ZrIQunu7mS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c40b77a567223b5080e8e528bce3dd0_NeikiAnalytics.exe
Files
-
6c40b77a567223b5080e8e528bce3dd0_NeikiAnalytics.exe.exe windows:6 windows x64 arch:x64
bf6763f8a5af7109df0f7cafc9dc5b1a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
avformat-60
av_guess_format
av_write_trailer
av_interleaved_write_frame
avformat_write_header
avformat_alloc_output_context2
avio_open2
avformat_new_stream
avformat_free_context
avio_close
av_dump_format
avcodec-60
avcodec_find_encoder
av_packet_unref
av_packet_free
avcodec_close
av_packet_alloc
av_packet_rescale_ts
avcodec_alloc_context3
avcodec_free_context
avcodec_open2
avcodec_fill_audio_frame
avcodec_receive_packet
avcodec_send_frame
avcodec_find_encoder_by_name
swscale-7
sws_scale
sws_getContext
sws_freeContext
avutil-58
av_opt_set
av_hwframe_transfer_data
av_hwframe_get_buffer
av_strerror
av_frame_alloc
av_frame_free
av_frame_get_buffer
av_hwdevice_ctx_create
av_hwframe_ctx_alloc
av_hwframe_ctx_init
nghttp2
nghttp2_session_callbacks_set_send_callback
nghttp2_session_callbacks_del
nghttp2_session_callbacks_set_on_data_chunk_recv_callback
nghttp2_session_callbacks_set_on_stream_close_callback
nghttp2_session_callbacks_set_on_begin_headers_callback
nghttp2_session_mem_recv
nghttp2_session_callbacks_set_on_header_callback
nghttp2_session_client_new
nghttp2_session_server_new
nghttp2_session_del
nghttp2_session_get_stream_user_data
nghttp2_session_set_stream_user_data
nghttp2_session_terminate_session
nghttp2_submit_request
nghttp2_submit_response
nghttp2_submit_settings
nghttp2_session_want_read
nghttp2_session_want_write
nghttp2_strerror
nghttp2_select_next_protocol
nghttp2_session_callbacks_set_on_frame_recv_callback
nghttp2_session_callbacks_new
nghttp2_session_send
event_openssl
bufferevent_openssl_get_ssl
bufferevent_openssl_socket_new
bufferevent_get_openssl_error
event_core
evbuffer_write
evbuffer_remove
bufferevent_socket_connect_hostname
bufferevent_socket_get_dns_error
bufferevent_free
bufferevent_setcb
evbuffer_get_length
event_base_loopexit
event_add
event_free
event_new
bufferevent_disable
bufferevent_write
evconnlistener_get_base
evconnlistener_free
evconnlistener_new_bind
event_del
event_base_loopbreak
bufferevent_socket_new
evutil_gai_strerror
evutil_freeaddrinfo
evutil_getaddrinfo
evutil_closesocket
bufferevent_enable
bufferevent_get_output
bufferevent_get_input
bufferevent_getfd
event_self_cbarg
event_base_free
event_base_loop
event_base_new
ws2_32
WSAGetLastError
setsockopt
inet_ntop
WSACleanup
WSAStartup
libssl-3-x64
SSL_CTX_set_alpn_protos
SSL_shutdown
TLS_server_method
SSL_CTX_use_certificate
SSL_CTX_use_RSAPrivateKey
SSL_CTX_set_alpn_select_cb
SSL_select_next_proto
SSL_CTX_set_next_protos_advertised_cb
TLS_client_method
SSL_CTX_ctrl
SSL_new
SSL_CTX_free
SSL_CTX_new
SSL_CTX_set_keylog_callback
SSL_get0_alpn_selected
SSL_get0_next_proto_negotiated
SSL_CTX_set_next_proto_select_cb
SSL_CTX_set_options
libcrypto-3-x64
ERR_error_string
BIO_new
BIO_free
PEM_read_bio_PrivateKey
BIO_puts
BIO_s_mem
RSA_free
EVP_PKEY_get1_RSA
PEM_read_bio_X509
X509_free
EVP_PKEY_free
kernel32
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GlobalUnlock
GlobalLock
GlobalFree
GetLastError
LocalFree
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
Sleep
SystemTimeToFileTime
SetCurrentDirectoryA
GetSystemTimeAsFileTime
GetModuleFileNameA
CloseHandle
ReleaseMutex
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObject
CreateSemaphoreA
CreateFileA
FlushFileBuffers
GetFileSize
ReadFile
SetEndOfFile
SetFilePointerEx
WriteFile
DuplicateHandle
GetCurrentProcess
GetCurrentDirectoryA
FindClose
FindFirstFileA
FindNextFileA
GetFullPathNameA
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
CreateMutexA
InitializeSListHead
GlobalAlloc
user32
EnumDisplayDevicesA
GetMonitorInfoA
EnumDisplayMonitors
GetCursorInfo
EnumDisplaySettingsA
GetDC
DrawIcon
gdi32
GetDIBits
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SelectObject
ole32
CoCreateInstance
PropVariantClear
CoInitializeEx
CoTaskMemFree
CoUninitialize
msvcp140
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Mbrtowc
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?uncaught_exceptions@std@@YAHXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setf@ios_base@std@@QEAAHHH@Z
?_Xbad_function_call@std@@YAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?width@ios_base@std@@QEBA_JXZ
vcruntime140
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
memcpy
memmove
memset
memcmp
memchr
_purecall
__C_specific_handler
__current_exception
__current_exception_context
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
_seh_filter_exe
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
exit
_exit
_errno
strerror_s
perror
_c_exit
_register_thread_local_exe_atexit_callback
_beginthreadex
_get_narrow_winmain_command_line
signal
terminate
abort
_invalid_parameter_noinfo_noreturn
_set_app_type
api-ms-win-crt-heap-l1-1-0
_callnewh
realloc
free
_set_new_mode
calloc
malloc
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vsprintf
_write
rewind
ftell
fseek
fread
ferror
feof
fclose
fopen_s
__p__commode
_set_fmode
api-ms-win-crt-math-l1-1-0
_isnan
ceilf
_finite
__setusermatherr
api-ms-win-crt-string-l1-1-0
_strdup
isalpha
_stricmp
strncmp
strspn
_strnicmp
api-ms-win-crt-convert-l1-1-0
strtod
strtoll
api-ms-win-crt-filesystem-l1-1-0
remove
_mkdir
_rmdir
_chdir
api-ms-win-crt-time-l1-1-0
_mkgmtime64
_ftime64
_gmtime64_s
_localtime64_s
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 402KB - Virtual size: 402KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ