UICC.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4a5c8b9c617647a0d4b26d23909cd8b8f4ccdc111340aa96e67025efd09087c6_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
4a5c8b9c617647a0d4b26d23909cd8b8f4ccdc111340aa96e67025efd09087c6_NeikiAnalytics.exe
-
Size
1.6MB
-
MD5
e14a69133d770101cabde98683081050
-
SHA1
00fc929391e3dab4ed0bd5ae8e47c6dfe16684ad
-
SHA256
4a5c8b9c617647a0d4b26d23909cd8b8f4ccdc111340aa96e67025efd09087c6
-
SHA512
80d7595711787bb312d3f716ef0696e0188afd1b4005c96139bd3f888caa95cd1f5ac28abfe8da28fb82fa0159d7db4e19ebfc3bc2f3acb32b07cbdd3b3df509
-
SSDEEP
24576:FZg0ETBzZbl0fitGbna8FLk2m1X2D4brrJ:P0BVblI7a8K2mFhbrr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a5c8b9c617647a0d4b26d23909cd8b8f4ccdc111340aa96e67025efd09087c6_NeikiAnalytics.exe
Files
-
4a5c8b9c617647a0d4b26d23909cd8b8f4ccdc111340aa96e67025efd09087c6_NeikiAnalytics.exe.exe windows:10 windows x86 arch:x86
d7facf6ed354ddc6b15dd1ce30c2b508
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
MultiByteToWideChar
GetFileAttributesA
DeleteFileA
GetModuleFileNameW
SetEnvironmentVariableA
CloseHandle
CreateFileW
VirtualQuery
GetSystemInfo
GetTimeZoneInformation
GetLocaleInfoW
HeapSize
FlushFileBuffers
WriteConsoleW
SetStdHandle
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetStringTypeW
EnumSystemLocalesA
GetUserDefaultLCID
GetCommandLineA
GetVersionExW
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetLastError
HeapFree
HeapAlloc
SetLastError
GetCurrentThread
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetProcAddress
ExitProcess
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameA
HeapCreate
HeapDestroy
VirtualFree
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
OutputDebugStringA
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
VirtualAlloc
FatalAppExitA
Sleep
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
FreeLibrary
LoadLibraryExA
SetConsoleCtrlHandler
VirtualProtect
RtlUnwind
GetConsoleCP
GetConsoleMode
SetFilePointer
GetLocaleInfoA
IsValidLocale
CompareStringW
uiccdll
?CreateMarkupContainer@NetUI@@YGJPAVElement@1@PAPAUIMarkupContainer@1@@Z
?CompileBinary@NetUI@@YGJPB_W0PAUIParseErrorHandler@1@PAUIDataSourceDescriptionIDRetriever@FlexUI@@PAURibbonCompileParams@1@_NW4ECompilerFormat@1@@Z
?Uninitialize@NUIDocument@NetUI@@SGJXZ
?Initialize@NUIDocument@NetUI@@SGJXZ
?CreateDataSourceResolver@FlexUI@@YGJPAPAUIDataSourceResolver@1@@Z
oleaut32
SysAllocStringLen
SysFreeString
ole32
CoUninitialize
CoInitialize
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
Sections
.text Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE