E:\Projects\BKemu.Platform\Temp\Lib\x86\BKScreenD3D.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b387ce5f5469c9784921e3358d88bd10_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b387ce5f5469c9784921e3358d88bd10_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
General
-
Target
b387ce5f5469c9784921e3358d88bd10_NeikiAnalytics.exe
-
Size
1.8MB
-
MD5
b387ce5f5469c9784921e3358d88bd10
-
SHA1
3b6ee4c90b337c8ad155d2a84cf4d33beca563c1
-
SHA256
1b8e5a97da18cd9a9d3331e40343def33f7cf95262073f6b06c0dd0e26466df4
-
SHA512
ef60b557e7b386a78454859de1936e71c518bcfb3bd96527056995b88e5830a58944cd42943605e5e61093fd89cadb6ae304dfed9dd8a2122dd97fb9c7f5eedc
-
SSDEEP
49152:i6jz4GVNjg0ip/CcejJPmyzzQa1E9naeJJrAu6y+hhJgLIl:i6jz4kNZeqcejJPmyzzFE9nae/rAu6hK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b387ce5f5469c9784921e3358d88bd10_NeikiAnalytics.exe
Files
-
b387ce5f5469c9784921e3358d88bd10_NeikiAnalytics.exe.dll windows:6 windows x86 arch:x86
5f78140ade90ecf5de559ade2d3eab48
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
FindResourceExW
CreateFileW
FindClose
FindFirstFileW
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetVolumeInformationW
LockFile
ReadFile
lstrcpyW
SetFilePointer
UnlockFile
WriteFile
DuplicateHandle
GetCurrentProcess
lstrcmpiW
GetWindowsDirectoryW
VerSetConditionMask
VerifyVersionInfoW
GetFileAttributesW
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
GetTempPathW
GetTickCount64
GetProfileIntW
SearchPathW
GetTempFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RaiseException
RtlUnwind
InterlockedFlushSList
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapQueryInformation
GetSystemInfo
VirtualAlloc
VirtualQuery
QueryPerformanceFrequency
SetStdHandle
GetFileType
ExitProcess
GetStdHandle
LCMapStringW
GetTimeZoneInformation
GetConsoleOutputCP
GetCurrentDirectoryW
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
WriteConsoleW
FileTimeToSystemTime
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
lstrcmpA
GetVersionExW
GetCurrentProcessId
GlobalGetAtomNameW
MultiByteToWideChar
WideCharToMultiByte
ResumeThread
SetThreadPriority
WaitForSingleObject
CloseHandle
SetErrorMode
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryW
LoadLibraryA
FindResourceW
SizeofResource
LockResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
SetLastError
EncodePointer
OutputDebugStringA
GetConsoleMode
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
HeapFree
GetTickCount
SetEndOfFile
Sleep
user32
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
SetClassLongW
SetWindowRgn
DrawEdge
DrawFrameControl
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
GetAsyncKeyState
GetNextDlgTabItem
CreateDialogIndirectParamW
RealChildWindowFromPoint
GetDesktopWindow
LoadCursorW
GetSysColorBrush
PostQuitMessage
GetWindowThreadProcessId
OffsetRect
SetRectEmpty
SendDlgItemMessageA
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
MoveWindow
ShowWindow
CopyImage
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
SystemParametersInfoW
InflateRect
MessageBeep
DestroyMenu
GetSystemMetrics
FillRect
ClientToScreen
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
EnableWindow
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
SendMessageW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
GetParent
GetClientRect
GetWindowPlacement
SetWindowLongW
GetWindowLongW
SetParent
SetWindowPlacement
UnregisterClassW
GetIconInfo
DrawIconEx
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
CharUpperW
GetNextDlgGroupItem
KillTimer
SetTimer
DeleteMenu
SetCursor
ShowOwnedPopups
LoadImageW
DestroyIcon
InvalidateRect
TrackMouseEvent
IntersectRect
GetMenuItemInfoW
MapDialogRect
EndDialog
msimg32
AlphaBlend
TransparentBlt
shlwapi
StrFormatKBSizeW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
uxtheme
GetThemeColor
GetThemePartSize
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetWindowTheme
DrawThemeText
GetCurrentThemeName
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
d3d11
D3D11CreateDevice
winmm
PlaySoundW
gdiplus
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipGetImageHeight
GdipDrawImageI
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
gdi32
CreateDCW
GetDeviceCaps
DeleteDC
BitBlt
CreateBitmap
CreateCompatibleDC
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
CreateSolidBrush
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetObjectW
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
CopyMetaFileW
SetTextColor
GetStockObject
SetBkColor
MoveToEx
GetTextFaceW
SetROP2
SetTextAlign
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
shell32
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHAppBarMessage
SHGetFileInfoW
ole32
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoInitializeEx
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoUninitialize
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
oleaut32
SysAllocString
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SysFreeString
VariantChangeType
VariantClear
VariantInit
VariantCopy
VarBstrFromDate
SysAllocStringLen
Exports
Exports
??0BKScreen_t@@QAE@XZ
??0CBKScreen_Shared@@QAE@ABV0@@Z
??0CBKScreen_Shared@@QAE@XZ
??0CScreenD3D@@QAE@ABV0@@Z
??0CScreenD3D@@QAE@XZ
??0LockVarType@@QAE@$$QAV0@@Z
??0LockVarType@@QAE@ABV0@@Z
??0LockVarType@@QAE@XZ
??1CBKScreen_Shared@@UAE@XZ
??1CScreenD3D@@UAE@XZ
??4BKScreen_t@@QAEAAU0@$$QAU0@@Z
??4BKScreen_t@@QAEAAU0@ABU0@@Z
??4CBKScreen_Shared@@QAEAAV0@ABV0@@Z
??4CScreenD3D@@QAEAAV0@ABV0@@Z
??4LockVarType@@QAEAAV0@$$QAV0@@Z
??4LockVarType@@QAEAAV0@ABV0@@Z
??_7CBKScreen_Shared@@6B@
??_7CScreenD3D@@6B@
?BKSS_DrawScreen@CBKScreen_Shared@@UAEXXZ
?BKSS_DrawScreen@CScreenD3D@@UAEXXZ
?BKSS_GetBackgroundWindow@CBKScreen_Shared@@UAEPAVCWnd@@XZ
?BKSS_GetReverseFlag@CBKScreen_Shared@@UAE_NXZ
?BKSS_IsFullScreenMode@CBKScreen_Shared@@UAE_NXZ
?BKSS_OnEraseBackground@CBKScreen_Shared@@UAEXXZ
?BKSS_OnSize@CBKScreen_Shared@@UAEXHH@Z
?BKSS_OnSize@CScreenD3D@@UAEXHH@Z
?BKSS_RestoreFullScreen@CBKScreen_Shared@@UAEXXZ
?BKSS_RestoreFullScreen@CScreenD3D@@UAEXXZ
?BKSS_ScreenView_Done@CBKScreen_Shared@@UAEXXZ
?BKSS_ScreenView_Done@CScreenD3D@@UAEXXZ
?BKSS_ScreenView_Init@CBKScreen_Shared@@UAEJPAUBKScreen_t@@PAVCWnd@@@Z
?BKSS_ScreenView_Init@CScreenD3D@@UAEJPAUBKScreen_t@@PAVCWnd@@@Z
?BKSS_ScreenView_ReInit@CBKScreen_Shared@@UAEJPAUBKScreen_t@@@Z
?BKSS_ScreenView_ReInit@CScreenD3D@@UAEJPAUBKScreen_t@@@Z
?BKSS_SetColorMode@CBKScreen_Shared@@UAEXXZ
?BKSS_SetFullScreenMode@CBKScreen_Shared@@UAE_NXZ
?BKSS_SetFullScreenMode@CScreenD3D@@UAE_NXZ
?BKSS_SetSmoothing@CBKScreen_Shared@@UAEX_N@Z
?BKSS_SetSmoothing@CScreenD3D@@UAEX_N@Z
?BKSS_SetWindowMode@CBKScreen_Shared@@UAE_NXZ
?BKSS_SetWindowMode@CScreenD3D@@UAE_NXZ
?ChangeSize@CScreenD3D@@IAEXHH@Z
?CreateTexture@CScreenD3D@@IAEJXZ
?IsLocked@LockVarType@@QBEKXZ
?Lock@LockVarType@@QAEXH@Z
?ReleaseTexture@CScreenD3D@@IAEXXZ
?SetSamplerState@CScreenD3D@@IAEJXZ
?TimedLock@LockVarType@@QAEHKH@Z
?TryLock@LockVarType@@QAEHXZ
?UnLock@LockVarType@@QAEXXZ
?createTexture@BKScreen_t@@QAE_NHH@Z
?deleteTexture@BKScreen_t@@QAEXXZ
GetBKScreen
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 308KB - Virtual size: 307KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ