msadds.pdb
Static task
static1
Behavioral task
behavioral1
Sample
664ee0f045c238b2859f5b3700049860_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
General
-
Target
664ee0f045c238b2859f5b3700049860_NeikiAnalytics.exe
-
Size
408KB
-
MD5
664ee0f045c238b2859f5b3700049860
-
SHA1
0c040dd7033f6e38f6d6956e79007125c83b69d7
-
SHA256
49ace3436b8755b6f98ad3f73567c733dff7febea0274f9cd6e7304f95f24e33
-
SHA512
261e310f764ae61f86106f1b3a8e0e108c802c41204fb58d75d228c4bb01988fd9cd5dbe5fbdb5f917eb767e6207493a495d394df0df2df4fbfed25f566dc450
-
SSDEEP
6144:4ERE5JjO9K9vqSNhjelfoippMLtMm9rznY8iwAwM/0X1Tlvd8VlYuAw5jw:4ED0oSNhjelf1a/nYkMy1EVbt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 664ee0f045c238b2859f5b3700049860_NeikiAnalytics.exe
Files
-
664ee0f045c238b2859f5b3700049860_NeikiAnalytics.exe.dll regsvr32 windows:10 windows x86 arch:x86
fc4cb3700ef487a3f9c82ee9e71afd48
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
?terminate@@YAXXZ
_except_handler4_common
iswalnum
_wcsnicmp
_vsnwprintf
_CxxThrowException
wcsstr
_lock
_unlock
__dllonexit
_onexit
_purecall
wcschr
_initterm
free
malloc
_stricmp
__CxxFrameHandler3
_ultoa_s
strncpy_s
iswdigit
iswalpha
_XcptFilter
??1type_info@@UAE@XZ
_amsg_exit
swscanf_s
memcpy
memset
kernel32
GetCurrentProcess
GetTickCount
GetSystemTimeAsFileTime
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
OutputDebugStringA
GetDriveTypeA
SearchPathA
GetFullPathNameA
GetCurrentProcessId
GetModuleFileNameA
GetProcAddress
CompareStringW
VirtualQuery
LeaveCriticalSection
GetCurrentThreadId
HeapDestroy
DisableThreadLibraryCalls
GetModuleFileNameW
LoadLibraryExW
FreeLibrary
LoadLibraryExA
user32
GetActiveWindow
MessageBoxW
LoadStringW
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegGetValueA
ole32
ProgIDFromCLSID
CoGetMalloc
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
oleaut32
VariantCopy
SysStringByteLen
SysStringLen
CreateErrorInfo
GetErrorInfo
SysFreeString
SysAllocString
SetErrorInfo
VariantClear
VariantInit
ntdll
WinSqmSetDWORD
msdart
MpGetHeapHandle
MPInitializeCriticalSection
MPDeleteCriticalSection
UMSEnterCSWraper
MpHeapAlloc
MpHeapFree
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 211KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdbid Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ