pidgenx.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0c1a80f9afc31f16379bfe43bc0b0fe2d04f57785b08ac19d1807e35e74b1e7c_NeikiAnalytics.dll
Resource
win7-20240611-en
General
-
Target
0c1a80f9afc31f16379bfe43bc0b0fe2d04f57785b08ac19d1807e35e74b1e7c_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
e31a52406af570e1566fbd2fc558baf0
-
SHA1
a9f51a9ee28fa3e41bd1ddeb7e3e55e2fe4a8049
-
SHA256
0c1a80f9afc31f16379bfe43bc0b0fe2d04f57785b08ac19d1807e35e74b1e7c
-
SHA512
2215c2a296d920bac86c6d753a23e7e9a9a281d6bd244297c8d0afa418738a9c10131eb0eea788ed00a3d6ca9b9fd0fd494d3bfd5279f9791b5798f4dec07f58
-
SSDEEP
49152:hjNVWKBgi6c7scTRn4pjc2IGTa8Z3/gBx:hpUIE4/2Z3/K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c1a80f9afc31f16379bfe43bc0b0fe2d04f57785b08ac19d1807e35e74b1e7c_NeikiAnalytics.exe
Files
-
0c1a80f9afc31f16379bfe43bc0b0fe2d04f57785b08ac19d1807e35e74b1e7c_NeikiAnalytics.exe.dll windows:6 windows x86 arch:x86
d9cce9cac67215391da3d888c5137316
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_onexit
_lock
__dllonexit
_unlock
memmove
memcpy
_amsg_exit
_initterm
free
malloc
_XcptFilter
_wcsicmp
_purecall
_vsnwprintf
rand
srand
time
wcsncmp
_wtoi
_wcsnicmp
_ui64tow
_itow
wcsstr
wcschr
memset
kernel32
InterlockedExchangeAdd
CreateEventW
CreateSemaphoreW
VirtualQuery
ReleaseSemaphore
SetEvent
WaitForSingleObject
GetModuleFileNameW
GetCurrentThread
GetThreadPriority
GetProcessAffinityMask
RaiseException
UnmapViewOfFile
GetSystemInfo
VirtualProtect
FreeLibrary
LoadLibraryW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FreeLibraryAndExitThread
VirtualFree
VirtualAlloc
FileTimeToSystemTime
GetSystemDefaultLangID
GetVersionExW
HeapAlloc
GetProcessHeap
HeapFree
InterlockedIncrement
InterlockedDecrement
LocalFree
CloseHandle
GetLastError
GetVersionExA
LocalAlloc
WideCharToMultiByte
MultiByteToWideChar
SetFilePointer
ReadFile
GetFileSize
CreateFileW
SetLastError
InterlockedExchange
Sleep
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetVersion
SetThreadPriority
WaitForMultipleObjects
CreateThread
MapViewOfFile
CreateFileMappingW
SystemTimeToFileTime
GetLocalTime
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
advapi32
TraceEvent
CryptGenKey
CryptExportKey
CryptVerifySignatureA
CryptSignHashA
CryptImportKey
CryptDecrypt
CryptEncrypt
CryptDestroyKey
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptAcquireContextW
CryptGenRandom
TraceMessage
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
CryptReleaseContext
rpcrt4
UuidToStringW
I_RpcMapWin32Status
RpcStringFreeW
UuidFromStringW
Exports
Exports
PidGenX
PidGenX2
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 160KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 396KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ