msltus40.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2215a7e5f3bd40e3101a92f5fc24ecaac6fd092b184b70df0a05d1d6cd2a75fa_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2215a7e5f3bd40e3101a92f5fc24ecaac6fd092b184b70df0a05d1d6cd2a75fa_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
2215a7e5f3bd40e3101a92f5fc24ecaac6fd092b184b70df0a05d1d6cd2a75fa_NeikiAnalytics.exe
-
Size
371KB
-
MD5
4105e964c88c603ea4b6234f23de1610
-
SHA1
3d361d706eb9f6da7773b215629621c335a4e225
-
SHA256
2215a7e5f3bd40e3101a92f5fc24ecaac6fd092b184b70df0a05d1d6cd2a75fa
-
SHA512
6282fbfa14ace533e340945f5ad0db2896e258693a7767e5ba4cb972b5da4be4e04f1840d1a4c4394d54d8bb669ce12df032cbcc522522b8da09dbbf6b7f80f7
-
SSDEEP
6144:TIj5I7vgGBCF643CVB8f8Y1E3XPYlc+GihpdhLE:uIzgGBCFyV2f80EPucsx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2215a7e5f3bd40e3101a92f5fc24ecaac6fd092b184b70df0a05d1d6cd2a75fa_NeikiAnalytics.exe
Files
-
2215a7e5f3bd40e3101a92f5fc24ecaac6fd092b184b70df0a05d1d6cd2a75fa_NeikiAnalytics.exe.dll regsvr32 windows:6 windows x86 arch:x86
f20127490c58090f4fb5a3ffb75e9d54
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msjet40
ord172
ord118
ord101
ord145
ord159
ord176
ord179
ord108
ord136
mswstr10
ord1
advapi32
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCloseKey
kernel32
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
OutputDebugStringW
RtlUnwind
HeapSize
SetStdHandle
WriteConsoleW
FlushFileBuffers
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
GetProcAddress
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetACP
DisableThreadLibraryCalls
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FileTimeToLocalFileTime
FindClose
ReadFile
SetFilePointer
WriteFile
CloseHandle
FileTimeToDosDateTime
GetCurrentProcessId
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryA
GetCurrentDirectoryW
CreateDirectoryA
CreateDirectoryW
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
GetDriveTypeW
GetFileAttributesA
GetFileAttributesW
GetFullPathNameA
GetFullPathNameW
RemoveDirectoryA
RemoveDirectoryW
GetTempPathW
SetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExA
LoadLibraryExW
GetPrivateProfileStringA
GetPrivateProfileStringW
WritePrivateProfileStringA
WritePrivateProfileStringW
GetTempPathA
GetStringTypeW
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
GetCommandLineA
GetCurrentThreadId
IsValidCodePage
GetOEMCP
GetCPInfo
EncodePointer
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
RaiseException
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
LCMapStringW
oleaut32
VarDecFromR8
SysFreeString
VarR8FromStr
VarR8FromDec
VarBstrFromR8
VarI2FromStr
SysAllocStringLen
user32
CharUpperW
CharUpperA
Exports
Exports
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ