FXSUNATD.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6fd335417ab60e553e63d6b730db486d289de8ca89e8fd4f0fbf5e249e1ebe29_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
6fd335417ab60e553e63d6b730db486d289de8ca89e8fd4f0fbf5e249e1ebe29_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
General
-
Target
6fd335417ab60e553e63d6b730db486d289de8ca89e8fd4f0fbf5e249e1ebe29_NeikiAnalytics.exe
-
Size
46KB
-
MD5
ad5ee67fceb5102b001971bca409d7b0
-
SHA1
da50c21cec17005c911d44b16f1288e10bbbf62e
-
SHA256
6fd335417ab60e553e63d6b730db486d289de8ca89e8fd4f0fbf5e249e1ebe29
-
SHA512
ad7447801a2fa1fdb3fc933a0f781186b57464c05dc26e6e1b99b25140924d059a233f79e65ed76a377b117ae174481bd5fb31297bf3fa8946c45626727ec7ee
-
SSDEEP
768:nPz3TdjDRsAdHJ1Fi6cLCORQt8T3xPJclqXIAAQPe8Pj76Q9FJb0GZIL5:nPz3TdpsAdDk6snRVbxzXIAAQPe8b76Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fd335417ab60e553e63d6b730db486d289de8ca89e8fd4f0fbf5e249e1ebe29_NeikiAnalytics.exe
Files
-
6fd335417ab60e553e63d6b730db486d289de8ca89e8fd4f0fbf5e249e1ebe29_NeikiAnalytics.exe.exe windows:6 windows x86 arch:x86
0afd8f17aacb46950bfff45bdcf52fa9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
TraceMessage
kernel32
HeapAlloc
GetProcessHeap
OutputDebugStringW
HeapFree
LoadLibraryW
GetProcAddress
FreeLibrary
GetVersionExW
SetLastError
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
HeapSetInformation
GetLastError
InterlockedExchange
Sleep
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
msvcrt
__p__fmode
__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_controlfp
__p__commode
__setusermatherr
_amsg_exit
_initterm
memset
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_vsnwprintf
fxsapi
FaxSetPortExW
FaxConnectFaxServerW
FaxFreeBuffer
FaxSetExtensionDataW
FaxEnumPortsExW
FaxClose
winspool.drv
GetPrinterW
OpenPrinterW
EnumPrintersW
SetPrinterW
ClosePrinter
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE