D:\a\php-ftw\php-ftw\php\vs16\x86\obj\Release\php_enchant.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3becd6bf9e184599a1728f850362fddb32c077cb00d7803d6f0f249d0fda411a_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
3becd6bf9e184599a1728f850362fddb32c077cb00d7803d6f0f249d0fda411a_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
General
-
Target
3becd6bf9e184599a1728f850362fddb32c077cb00d7803d6f0f249d0fda411a_NeikiAnalytics.exe
-
Size
19KB
-
MD5
dffe8c6508534d249f3aa021efcab7d0
-
SHA1
39a35139c2767c9f26bcbcf328b339c86c84cef4
-
SHA256
3becd6bf9e184599a1728f850362fddb32c077cb00d7803d6f0f249d0fda411a
-
SHA512
8e7d454acf5828bf30f1925dc67a4c18108ba376974d82eb617cd740161610bb20a23491c74c6a05a85729cf86021a60326c8692f4958d7b4121077d47c0ba8a
-
SSDEEP
384:zaAjEPk+DUrpBiTQjdl7YseH5qAGCvMgOkfuhgf:mdPwLeKNYHH5qA3vMgB8g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3becd6bf9e184599a1728f850362fddb32c077cb00d7803d6f0f249d0fda411a_NeikiAnalytics.exe
Files
-
3becd6bf9e184599a1728f850362fddb32c077cb00d7803d6f0f249d0fda411a_NeikiAnalytics.exe.dll windows:6 windows x86 arch:x86
2daf19f19a8e33d71babef7323b14f3e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
php8
add_assoc_string_ex
php_info_print_table_start
_emalloc@@4
zend_object_std_init@@8
zend_throw_error
std_object_handlers
zend_register_internal_class_ex
zend_objects_not_comparable
zend_wrong_parameters_none_error@@0
object_properties_init
zend_register_string_constant
zend_value_error
php_check_open_basedir
zend_hash_next_index_insert@@8
zend_argument_value_error
_zend_new_array@@4
zend_parse_parameters
zend_register_long_constant
zend_string_init_interned
zend_try_assign_typed_ref_arr
zval_ptr_dtor
php_info_print_table_end
php_info_print_table_row
zend_object_std_dtor
add_next_index_string
object_init_ex
libenchant2
enchant_broker_init
enchant_dict_get_error
enchant_broker_describe
enchant_broker_request_dict
enchant_broker_set_ordering
enchant_broker_list_dicts
enchant_dict_free_string_list
enchant_broker_free_dict
enchant_broker_dict_exists
enchant_dict_add_to_session
enchant_get_version
enchant_dict_store_replacement
enchant_broker_get_error
enchant_broker_request_pwl_dict
enchant_dict_suggest
enchant_dict_check
enchant_dict_describe
enchant_broker_free
enchant_dict_is_added
enchant_dict_add
vcruntime140
memcpy
memset
__std_type_info_destroy_list
_except_handler4_common
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm
_cexit
_execute_onexit_table
_initterm_e
kernel32
GetCurrentThreadId
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
Exports
Exports
get_module
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ