e:\root_obse\skse\Release\skse_steam_loader.pdb
Static task
static1
Behavioral task
behavioral1
Sample
55abb1943617943d0810cd423467530d0136e89b37bdb430ce1b01264f55b74e_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
55abb1943617943d0810cd423467530d0136e89b37bdb430ce1b01264f55b74e_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
55abb1943617943d0810cd423467530d0136e89b37bdb430ce1b01264f55b74e_NeikiAnalytics.exe
-
Size
90KB
-
MD5
acd2a840d7ea4a0fb5e3ac19e544a760
-
SHA1
4fe1e2b5fb14a5a7afec243406f2b8042386001d
-
SHA256
55abb1943617943d0810cd423467530d0136e89b37bdb430ce1b01264f55b74e
-
SHA512
559c814bb8d4468244140cf60cfc1e70bf7390d82193eb3965aeeab66af3e4f748acbfe23262e82d937df37abe2c6a92a4332bca6b206d45881bcd2337361181
-
SSDEEP
1536:d06dkQbROMzOgJBUeQiCXqs4zGktW1dxJ15EV:a6dkQbRVHUnktW1dxJ15E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55abb1943617943d0810cd423467530d0136e89b37bdb430ce1b01264f55b74e_NeikiAnalytics.exe
Files
-
55abb1943617943d0810cd423467530d0136e89b37bdb430ce1b01264f55b74e_NeikiAnalytics.exe.dll windows:5 windows x86 arch:x86
790e95f685aaf6a3fcfae02e53b22c38
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
GetCurrentDirectoryA
ReadFile
GetSystemTimeAsFileTime
GetLastError
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
GetCurrentThreadId
CloseHandle
GetCurrentProcessId
CreateFileA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetProcessHeap
SetEndOfFile
GetDriveTypeA
GetFullPathNameA
GetCommandLineA
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapAlloc
HeapFree
Sleep
HeapSize
ExitProcess
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualAlloc
HeapReAlloc
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
user32
MessageBoxA
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ