D:\EPM 2.0 development\EPM 2.0 TFS Sync\EasyPrinterManagerV2\bin\VS2008\Win32\Release\ScanFax2PC\Scan2PCNotify.pdb
Static task
static1
Behavioral task
behavioral1
Sample
32004fb065f2fe590b571a0628bfb530462cdf7a5bb03f2042dc4d39e6a593ba_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
32004fb065f2fe590b571a0628bfb530462cdf7a5bb03f2042dc4d39e6a593ba_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
32004fb065f2fe590b571a0628bfb530462cdf7a5bb03f2042dc4d39e6a593ba_NeikiAnalytics.exe
-
Size
2.3MB
-
MD5
c9fed3cdd11e072bfd3d6c44ec9ec5e0
-
SHA1
53f5165407f2a1f893835da2a3f1ec54fe8b800b
-
SHA256
32004fb065f2fe590b571a0628bfb530462cdf7a5bb03f2042dc4d39e6a593ba
-
SHA512
ae8bf4c778be4082c9466ea689f6420b983908fcc6ba3ac9b26c7d2c6285845147e1997405169efd5c93263a9e6ca372f5bfd276969e7b99cfa676488589c69d
-
SSDEEP
49152:j0hvHF3N1t0e0hkvtPLXuSieCHk9DeKAIQ/9EwR6A3u5/vNCFGR4y82xz1y+F:j0hxN4NhkvtPLeS7CHSDF/2EwRE/vN9Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32004fb065f2fe590b571a0628bfb530462cdf7a5bb03f2042dc4d39e6a593ba_NeikiAnalytics.exe
Files
-
32004fb065f2fe590b571a0628bfb530462cdf7a5bb03f2042dc4d39e6a593ba_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
f565732d67b0cdb5c4048b12cdec481c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
WriteConsoleW
GetProcessHeap
CreateFileA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
FatalAppExitA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetModuleHandleW
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
GetFileType
GetConsoleOutputCP
VirtualQuery
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
HeapSize
CreateThread
ExitThread
ExitProcess
RtlUnwind
HeapReAlloc
WriteConsoleA
HeapAlloc
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
LocalLock
LocalUnlock
FindResourceExW
GetDiskFreeSpaceW
VirtualProtect
GetFileTime
GetFileSizeEx
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
GetFileAttributesExW
FileTimeToLocalFileTime
GetProfileIntW
SearchPathW
GetSystemDirectoryW
GetTempFileNameW
SetErrorMode
GetShortPathNameW
GetFullPathNameW
IsValidLocale
SetStdHandle
EnumSystemLocalesA
InterlockedCompareExchange
IsProcessorFeaturePresent
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetStringTypeExW
MoveFileW
CreateFileW
GetFileSize
GetFileAttributesW
lstrcpyW
GlobalFlags
GetCurrentDirectoryW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
InterlockedIncrement
SystemTimeToFileTime
FileTimeToSystemTime
GetThreadLocale
lstrlenA
GetAtomNameW
GlobalGetAtomNameW
GetModuleHandleA
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GetCurrentProcessId
GlobalAddAtomW
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
CloseHandle
FreeResource
WritePrivateProfileStringW
GetPrivateProfileIntW
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
InterlockedDecrement
GetLastError
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
MultiByteToWideChar
LoadLibraryExW
GetVersionExW
DeleteCriticalSection
InitializeCriticalSection
OutputDebugStringW
FindResourceW
LoadResource
LockResource
SizeofResource
RaiseException
SetLastError
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
Sleep
GetTickCount
DeleteFileW
GetTempPathW
WideCharToMultiByte
lstrlenW
GetPrivateProfileStringW
GetProcAddress
FreeLibrary
LoadLibraryW
GetModuleFileNameW
SetEnvironmentVariableA
user32
InSendMessage
SendNotifyMessageW
IsClipboardFormatAvailable
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetCursorPos
SetRect
DrawFocusRect
DrawFrameControl
DrawEdge
DrawIconEx
UnpackDDElParam
ReuseDDElParam
GetMenuBarInfo
InsertMenuItemW
TranslateAcceleratorW
GetDialogBaseUnits
EmptyClipboard
CloseClipboard
SetClipboardData
LoadImageW
DestroyIcon
CopyImage
OpenClipboard
DrawStateW
RegisterClipboardFormatW
EnumChildWindows
LockWindowUpdate
BringWindowToTop
IsRectEmpty
KillTimer
SetTimer
InvalidateRect
IsMenu
SetClassLongW
SetParent
CreatePopupMenu
NotifyWinEvent
SetWindowRgn
CreateAcceleratorTableW
LoadAcceleratorsW
DestroyAcceleratorTable
GetAsyncKeyState
CharUpperW
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyW
ToUnicodeEx
CopyAcceleratorTableW
PostThreadMessageW
LoadMenuW
SetRectEmpty
DeleteMenu
WaitMessage
ReleaseCapture
SetCapture
UnregisterClassW
GetSysColorBrush
ScrollWindowEx
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
DefFrameProcW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
PtInRect
GetMenu
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
GetSysColor
DestroyMenu
GetMenuItemInfoW
InflateRect
CopyRect
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxW
ShowOwnedPopups
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
FrameRect
GetUpdateRect
CharUpperBuffW
CopyIcon
SubtractRect
GetIconInfo
GetDoubleClickTime
GetTabbedTextExtentA
GetTabbedTextExtentW
WindowFromDC
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
GetDCEx
GetNextDlgGroupItem
DestroyCursor
GetWindowRgn
MapDialogRect
GrayStringW
CreateMenu
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
WinHelpW
SystemParametersInfoW
OffsetRect
MessageBeep
RedrawWindow
IsZoomed
PostQuitMessage
PostMessageW
UnhookWindowsHookEx
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
CallWindowProcW
GetWindowLongW
DefWindowProcW
EnableWindow
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
AppendMenuW
GetSystemMenu
LoadIconW
RegisterWindowMessageW
CreateWindowExW
SetWindowLongW
LoadCursorW
GetClassInfoExW
RegisterClassExW
SetFocus
SendMessageW
DispatchMessageW
TranslateMessage
PeekMessageW
WindowFromPoint
UnregisterClassA
gdi32
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
OffsetRgn
GetRgnBox
CreateDIBitmap
CreateCompatibleBitmap
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
GetTextColor
SetDIBColorTable
PatBlt
GetDIBits
RealizePalette
CombineRgn
StretchBlt
SetPixel
CreateDIBSection
GetCharWidthW
CreateFontW
StretchDIBits
SetRectRgn
GetMapMode
DPtoLP
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
Polyline
Ellipse
Polygon
Rectangle
PtVisible
CreatePalette
GetPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceW
GetTextExtentPoint32A
CreateMetaFileW
CloseMetaFile
DeleteMetaFile
SetPixelV
StartDocW
GetPixel
GetWindowExtEx
EnumMetaFile
PlayMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
GetStockObject
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RoundRect
GetDeviceCaps
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
GetTextExtentPoint32W
ExtTextOutW
BitBlt
CreateCompatibleDC
CreateFontIndirectW
GetObjectW
CreateBitmap
CreateDCW
CopyMetaFileW
RectVisible
msimg32
AlphaBlend
TransparentBlt
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
GetJobW
advapi32
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegSetValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
GetFileSecurityW
SetFileSecurityW
RegQueryValueExW
RegCreateKeyW
RegQueryValueW
RegOpenKeyW
shell32
ExtractIconW
ShellExecuteW
Shell_NotifyIconW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
DragQueryFileW
DragFinish
SHGetFileInfoW
ShellExecuteExW
SHAppBarMessage
SHBrowseForFolderW
SHGetPathFromIDListW
comctl32
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx
shlwapi
PathFindExtensionW
PathRemoveExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathRemoveFileSpecW
oledlg
OleUIBusyW
ole32
CoRevokeClassObject
CoRegisterMessageFilter
CLSIDFromProgID
OleSaveToStream
WriteClassStm
OleSave
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleRun
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
CoUninitialize
OleGetClipboard
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
StgIsStorageFile
CoRegisterClassObject
CreateFileMoniker
StgCreateDocfile
OleSetMenuDescriptor
OleLockRunning
CreateStreamOnHGlobal
CoDisconnectObject
CLSIDFromString
StringFromGUID2
CoCreateInstance
OleDuplicateData
CoTreatAsClass
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
StringFromCLSID
GetHGlobalFromILockBytes
CoGetClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
CoGetMalloc
OleIsRunning
OleQueryLinkFromData
OleQueryCreateFromData
OleRegGetMiscStatus
OleRegEnumVerbs
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CreateGenericComposite
CreateItemMoniker
OleGetIconOfClass
OleCreateLinkToFile
OleSetContainedObject
OleCreateFromFile
StgOpenStorageOnILockBytes
OleLoad
OleCreateStaticFromData
OleCreate
OleCreateLinkFromData
StgOpenStorage
OleCreateFromData
oleaut32
SysFreeString
SysAllocString
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SafeArrayPutElement
gdiplus
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCloneImage
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
winmm
PlaySoundW
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 397KB - Virtual size: 396KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ