C:\wxWidgets-3.2.5\utils\wxrc\vc14x_mswudll\wxrc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1297f7d02bb083360d18b4293c1c4eb3a23ca81f4912b81a8a709d74ae3dd863_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1297f7d02bb083360d18b4293c1c4eb3a23ca81f4912b81a8a709d74ae3dd863_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
1297f7d02bb083360d18b4293c1c4eb3a23ca81f4912b81a8a709d74ae3dd863_NeikiAnalytics.exe
-
Size
73KB
-
MD5
1ca98939a9076ed1fc019086c8a524c0
-
SHA1
f2b17933c1cf98c6829b874caa784eae3497110e
-
SHA256
1297f7d02bb083360d18b4293c1c4eb3a23ca81f4912b81a8a709d74ae3dd863
-
SHA512
4e23befc6318d112e166cf2e89876882eff98464801abe0891f4843a0396c488dfa6f7f98737e274a1eddc5406ad8ed7d476a91335cdf40635130cd93e469204
-
SSDEEP
1536:BMWhab2Dum2FXqFZBgtyk5NbcwGnSf5PlyrcuYU8kEmjmqfUv:BTab2R7aZxf5Ply4uYVkEmfUv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1297f7d02bb083360d18b4293c1c4eb3a23ca81f4912b81a8a709d74ae3dd863_NeikiAnalytics.exe
Files
-
1297f7d02bb083360d18b4293c1c4eb3a23ca81f4912b81a8a709d74ae3dd863_NeikiAnalytics.exe.exe windows:6 windows x86 arch:x86
e77e5f17edcf65145f2d662cc6a4559e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wxbase32u_xml_vc14x
?GetRoot@wxXmlDocument@@QBEPAVwxXmlNode@@XZ
?Save@wxXmlDocument@@UBE_NABVwxString@@H@Z
?Load@wxXmlDocument@@UAE_NABVwxString@@0H@Z
??1wxXmlDocument@@UAE@XZ
??0wxXmlDocument@@QAE@XZ
?SetContent@wxXmlNode@@QAEXABVwxString@@@Z
?GetAttribute@wxXmlNode@@QBE?AVwxString@@ABV2@0@Z
?GetAttribute@wxXmlNode@@QBE_NABVwxString@@PAV2@@Z
wxbase32u_vc14x
?Init@wxArrayString@@IAEX_N@Z
?wxJoin@@YA?AVwxString@@ABVwxArrayString@@_W1@Z
?wxSplit@@YA?AVwxArrayString@@ABVwxString@@_W1@Z
?wxPuts@@YAHABVwxString@@@Z
?DummyProcessNode@_wxHashTableBase2@@KAPAU_wxHashTable_NodeBase@@PAU2@@Z
?DeleteNodes@_wxHashTableBase2@@KAXIPAPAU_wxHashTable_NodeBase@@P6AXPAU2@@Z@Z
?GetNextPrime@_wxHashTableBase2@@KAKK@Z
?CopyHashTable@_wxHashTableBase2@@KAXPAPAU_wxHashTable_NodeBase@@IPAV1@0P6AI1PAU2@@ZP6APAU2@2@Z@Z
??0wxStringHash@@QAE@XZ
??RwxStringHash@@QBEKABVwxString@@@Z
??0wxStringEqual@@QAE@XZ
??RwxStringEqual@@QBE_NABVwxString@@0@Z
?wxGetUTCTimeMillis@@YA?AVwxLongLongNative@@XZ
?GetCurrentId@wxThread@@SAKXZ
?IsEnabled@wxLog@@SA_NXZ
?GetComponentLevel@wxLog@@SAKABVwxString@@@Z
?OnLog@wxLog@@SAXKABVwxString@@ABVwxLogRecordInfo@@@Z
?wxEntry@@YAHAAHPAPA_W@Z
??0wxAppConsoleBase@@QAE@XZ
?CheckBuildOptions@wxAppConsoleBase@@SA_NPBD0@Z
??1wxAppConsole@@UAE@XZ
?wxFileExists@@YA_NABVwxString@@@Z
?wxIsAbsolutePath@@YA_NABVwxString@@@Z
?wxFileNameFromPath@@YA?AVwxString@@ABV1@@Z
?wxPathOnly@@YA?AVwxString@@ABV1@@Z
?wxFindFirstFile@@YA?AVwxString@@ABV1@H@Z
?wxFindNextFile@@YA?AVwxString@@XZ
?wxRemoveFile@@YA_NABVwxString@@@Z
?wxGetCwd@@YA?AVwxString@@XZ
?wxSetWorkingDirectory@@YA_NABVwxString@@@Z
?wxExecute@@YAJABVwxString@@HPAVwxProcess@@PBUwxExecuteEnv@@@Z
?wxGetEnv@@YA_NABVwxString@@PAV1@@Z
??7wxStreamBase@@QBE_NXZ
?Read@wxInputStream@@QAEAAV1@AAVwxOutputStream@@@Z
?SetCmdLine@wxCmdLineParser@@QAEXHABVwxCmdLineArgsArray@@@Z
??1wxCmdLineParser@@QAE@XZ
?SetDesc@wxCmdLineParser@@QAEXPBUwxCmdLineEntryDesc@@@Z
?Parse@wxCmdLineParser@@QAEH_N@Z
?Found@wxCmdLineParser@@QBE_NABVwxString@@@Z
?Found@wxCmdLineParser@@QBE_NABVwxString@@PAV2@@Z
?GetParamCount@wxCmdLineParser@@QBEIXZ
?GetParam@wxCmdLineParser@@QBE?AVwxString@@I@Z
?Init@wxCmdLineParser@@AAEXXZ
??0wxConvAuto@@QAE@W4wxFontEncoding@@@Z
??1wxConvAuto@@UAE@XZ
??0wxFFile@@QAE@XZ
??0wxFFile@@QAE@ABVwxString@@0@Z
?Open@wxFFile@@QAE_NABVwxString@@0@Z
?Attach@wxFFile@@QAEXPAU_iobuf@@ABVwxString@@@Z
?Read@wxFFile@@QAEIPAXI@Z
?Write@wxFFile@@QAE_NABVwxString@@ABVwxMBConv@@@Z
?Length@wxFFile@@QBE_JXZ
??1wxFFile@@QAE@XZ
??0wxFileName@@QAE@ABVwxString@@W4wxPathFormat@@@Z
?GetAbsolutePath@wxFileName@@QBE?AVwxString@@ABV2@W4wxPathFormat@@@Z
?SetExt@wxFileName@@QAEXABVwxString@@@Z
?GetExt@wxFileName@@QBE?AVwxString@@XZ
?GetName@wxFileName@@QBE?AVwxString@@XZ
?GetFullPath@wxFileName@@QBE?AVwxString@@W4wxPathFormat@@@Z
?SplitPath@wxFileName@@SAXABVwxString@@PAV2@11W4wxPathFormat@@@Z
??1wxFileName@@QAE@XZ
??0wxFormatString@@QAE@PB_W@Z
??1wxFileInputStream@@UAE@XZ
??0wxFileOutputStream@@QAE@ABVwxString@@@Z
??1wxFileOutputStream@@UAE@XZ
??4wxString@@QAEAAV0@ABV0@@Z
??1wxFileType@@QAE@XZ
?GetFileTypeFromExtension@wxMimeTypesManager@@QAEPAVwxFileType@@ABVwxString@@@Z
?AddPendingEvent@wxEvtHandler@@UAEXABVwxEvent@@@Z
?CallEventHandler@wxAppConsoleBase@@UBEXPAVwxEvtHandler@@AAVwxEventFunctor@@AAVwxEvent@@@Z
?CallOnInit@wxAppConsoleBase@@UAE_NXZ
?CleanUp@wxAppConsoleBase@@UAEXXZ
?CloneRefData@wxObject@@MBEPAVwxRefCounter@@PBV2@@Z
?CreateRefData@wxObject@@MBEPAVwxRefCounter@@XZ
?Add@wxArrayString@@QAEIABVwxString@@I@Z
?Dispatch@wxAppConsoleBase@@UAE_NXZ
?DoGetClientData@wxEvtHandler@@MBEPAXXZ
?DoGetClientObject@wxEvtHandler@@MBEPAVwxClientData@@XZ
?DoSetClientData@wxEvtHandler@@MAEXPAX@Z
?DoSetClientObject@wxEvtHandler@@MAEXPAVwxClientData@@@Z
?Exit@wxAppConsoleBase@@UAEXXZ
?ExitMainLoop@wxAppConsoleBase@@UAEXXZ
?FilterEvent@wxAppConsoleBase@@UAEHAAVwxEvent@@@Z
?GetClassInfo@wxEvtHandler@@UBEPAVwxClassInfo@@XZ
?GetEventHashTable@wxEvtHandler@@MBEAAVwxEventHashTable@@XZ
?GetEventTable@wxEvtHandler@@MBEPBUwxEventTable@@XZ
?HandleEvent@wxAppConsoleBase@@UBEXPAVwxEvtHandler@@P82@AEXAAVwxEvent@@@Z1@Z
?Initialize@wxAppConsoleBase@@UAE_NAAHPAPA_W@Z
?IsGUI@wxAppConsoleBase@@UBE_NXZ
?MainLoop@wxAppConsoleBase@@UAEHXZ
?OnAssert@wxAppConsoleBase@@UAEXPB_WH00@Z
?OnAssertFailure@wxAppConsoleBase@@UAEXPB_WH000@Z
?OnCmdLineError@wxAppConsoleBase@@UAE_NAAVwxCmdLineParser@@@Z
?OnCmdLineHelp@wxAppConsoleBase@@UAE_NAAVwxCmdLineParser@@@Z
?OnCmdLineParsed@wxAppConsoleBase@@UAE_NAAVwxCmdLineParser@@@Z
?OnDynamicBind@wxEvtHandler@@MAE_NAAUwxDynamicEventTableEntry@@@Z
?OnEventLoopEnter@wxAppConsoleBase@@UAEXPAVwxEventLoopBase@@@Z
?OnEventLoopExit@wxAppConsoleBase@@UAEXPAVwxEventLoopBase@@@Z
?OnExceptionInMainLoop@wxAppConsoleBase@@UAE_NXZ
?OnExit@wxAppConsoleBase@@UAEHXZ
?OnFatalException@wxAppConsoleBase@@UAEXXZ
?OnInitCmdLine@wxAppConsoleBase@@UAEXAAVwxCmdLineParser@@@Z
?OnLaunched@wxAppConsoleBase@@UAEXXZ
?OnUnhandledException@wxAppConsoleBase@@UAEXXZ
?Pending@wxAppConsoleBase@@UAE_NXZ
?ProcessEvent@wxEvtHandler@@UAE_NAAVwxEvent@@@Z
?ProcessIdle@wxAppConsoleBase@@UAE_NXZ
?ProcessPendingEvents@wxAppConsoleBase@@UAEXXZ
?QueueEvent@wxEvtHandler@@UAEXPAVwxEvent@@@Z
?RethrowStoredException@wxAppConsoleBase@@UAEXXZ
?SearchEventTable@wxEvtHandler@@UAE_NAAUwxEventTable@@AAVwxEvent@@@Z
?SetCLocale@wxAppConsoleBase@@UAEXXZ
?SetNextHandler@wxEvtHandler@@UAEXPAV1@@Z
?SetPreviousHandler@wxEvtHandler@@UAEXPAV1@@Z
?StoreCurrentException@wxAppConsoleBase@@UAE_NXZ
?TryAfter@wxEvtHandler@@MAE_NAAVwxEvent@@@Z
?TryBefore@wxEvtHandler@@MAE_NAAVwxEvent@@@Z
?UsesEventLoop@wxAppConsoleBase@@UBE_NXZ
?WXReservedApp1@wxAppConsoleBase@@MAEPAXPAX@Z
?WXReservedApp2@wxAppConsoleBase@@MAEPAXPAX@Z
?WXReservedEvtHandler1@wxEvtHandler@@MAEPAXPAX@Z
?WXReservedEvtHandler2@wxEvtHandler@@MAEPAXPAX@Z
?WakeUpIdle@wxAppConsoleBase@@UAEXXZ
?wxTheAssertHandler@@3P6AXABVwxString@@H000@ZA
?wxTrapInAssert@@3_NA
?wxEmptyString@@3PB_WB
?wxLOG_COMPONENT@@3PBDB
?ms_logLevel@wxLog@@0KA
?ms_appInitFn@wxAppConsoleBase@@1P6APAVwxAppConsole@@XZA
?wxTheMimeTypesManager@@3PAVwxMimeTypesManager@@A
?FromAscii@wxString@@SA?AV1@PBD@Z
?c_str@wxString@@QBE?AVwxCStrData@@XZ
?IsNumber@wxString@@QBE_NXZ
??7wxString@@QBE_NXZ
?empty@wxString@@QBE_NXZ
??0wxString@@QAE@PB_W@Z
??0wxString@@QAE@PBD@Z
??0wxString@@QAE@ABV0@@Z
??0wxString@@QAE@XZ
??BwxCStrData@@QBEPB_WXZ
?Index@wxArrayString@@QBEHABVwxString@@_N1@Z
??AwxArrayString@@QBEABVwxString@@I@Z
??1wxCStrData@@QAE@XZ
?get@?$wxArgNormalizerWchar@ABVwxCStrData@@@@QBEPB_WXZ
??0?$wxArgNormalizerWchar@ABVwxCStrData@@@@QAE@ABVwxCStrData@@PBVwxFormatString@@I@Z
??AwxArrayString@@QAEAAVwxString@@I@Z
?get@?$wxArgNormalizerWchar@ABVwxString@@@@QBEPB_WXZ
??0?$wxArgNormalizerWchar@ABVwxString@@@@QAE@ABVwxString@@PBVwxFormatString@@I@Z
??1wxArrayString@@QAE@XZ
??1wxString@@QAE@XZ
??1wxFormatString@@QAE@XZ
?DoFormatWchar@wxString@@CA?AV1@PB_WZZ
?DoPrintfWchar@wxString@@AAAHPB_WZZ
??YwxString@@QAEAAV0@PB_W@Z
??YwxString@@QAEAAV0@ABV0@@Z
?compare@wxString@@QBEHPB_W@Z
?RemoveLast@wxString@@QAEAAV1@I@Z
?Length@wxString@@QBEIXZ
?FormatV@wxString@@SA?AV1@ABV1@PAD@Z
?Replace@wxString@@QAEIABV1@0_N@Z
?Lower@wxString@@QBE?AV1@XZ
?EndsWith@wxString@@QBE_NABV1@PAV1@@Z
??H@YA?AVwxString@@PB_WABV0@@Z
??H@YA?AVwxString@@PBDABV0@@Z
?AsWChar@wxFormatString@@AAEPB_WXZ
?InputAsString@wxFormatString@@QBE?AVwxString@@XZ
??H@YA?AVwxString@@ABV0@PB_W@Z
??H@YA?AVwxString@@ABV0@PBD@Z
??H@YA?AVwxString@@ABV0@VwxUniChar@@@Z
??H@YA?AVwxString@@ABV0@0@Z
??6wxString@@QAEAAV0@_W@Z
??6wxString@@QAEAAV0@PB_W@Z
??6wxString@@QAEAAV0@ABV0@@Z
??4wxString@@QAEAAV0@PB_W@Z
??4wxString@@QAEAAV0@PBD@Z
??4wxString@@QAEAAV0@_W@Z
?CreateTraits@wxAppConsoleBase@@MAEPAVwxAppTraits@@XZ
?GetArgumentType@wxFormatString@@QBE?AW4ArgumentType@1@I@Z
??4wxString@@QAEAAV0@$$QAV0@@Z
?GetMimeType@wxFileType@@QBE_NPAVwxString@@@Z
??0wxFormatString@@QAE@ABVwxString@@@Z
??0wxFormatString@@QAE@PBD@Z
?FromHi8bit@wxUniChar@@CAID@Z
?wxOnAssert@@YAXPBDH00PB_W@Z
?wxOnAssert@@YAXPBDH000@Z
??0wxFileInputStream@@QAE@ABVwxString@@@Z
vcruntime140
memmove
__CxxFrameHandler3
_except_handler4_common
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
__std_terminate
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
__stdio_common_vfwprintf
__acrt_iob_func
api-ms-win-crt-heap-l1-1-0
calloc
free
realloc
_callnewh
malloc
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_controlfp_s
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_seh_filter_exe
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___wargv
__p___argc
_set_app_type
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
terminate
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
kernel32
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ