00439b36002b2a2bbf5e51f2246e129b41bc2c1ae8a684da0085e33cf38903d4_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

00439b36002b2a2bbf5e51f2246e129b41bc2c1ae8a684da0085e33cf38903d4_NeikiAnalytics.exe
Size

358KB
MD5

40d9bfa5d9e65a6db53976d37bb50be0
SHA1

840190a53b0f5a06e71c1e96cf42ba5c595f1e8e
SHA256

00439b36002b2a2bbf5e51f2246e129b41bc2c1ae8a684da0085e33cf38903d4
SHA512

c210661604057a09e0d5192af272d25b29df91ca4d2f154bc0c6bcd6725093e5efa23fa332be4984752b13bf798cd5d0536c4c17140f45fa5d3c174b3cadc0f2
SSDEEP

6144:l/jT21sxUaDF67F2iCzBo1Yu2hNpIZMDTeacr:9dMZjl

Score

1^/10

Malware Config

Signatures

Files

00439b36002b2a2bbf5e51f2246e129b41bc2c1ae8a684da0085e33cf38903d4_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

7a8a15fbb3922dfcf985fd016cc9a045

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:7d:fd:bb:d1:fd:72:ae:6b:d5:5e:fb:36:2c:ae:e1
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

15/05/2023, 00:00

Not After

14/05/2026, 23:59

Subject

CN=The MathWorks\, Inc.,O=The MathWorks\, Inc.,L=Natick,ST=Massachusetts,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

B:\matlab\bin\win64\spf\servicedependencies\onlinelicensing\shared\webserviceclient_impl\libmwollsharedwebserviceclient.pdb

Imports

libmwcppmicroservices

?getFramework@cppmicroservices@foundation@@YA?AV?$shared_ptr@VFramework@cppmicroservices@@@std@@XZ

libmwi18n

?isspace_ascii@lcctype@i18n@fl@@YAH_U@Z
?isdigit_ascii@lcctype@i18n@fl@@YAH_U@Z

libmwflhttpclient_core

??1ClientConfiguration@httpclient_core@foundation@@QEAA@XZ
?withRetryStrategy@ClientConfiguration@httpclient_core@foundation@@QEAAAEAV123@V?$function@$$A6A_NAEBVHttpRequest@httpclient_core@foundation@@AEBVHttpResponse@23@AEBVexception_ptr@std@@HH@Z@std@@@Z
?to_string@httpclient_core@foundation@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4HttpResponseCode@12@@Z
??0HttpHeaders@httpclient_core@foundation@@QEAA@XZ
?getHeaderValue@HttpHeaders@httpclient_core@foundation@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV45@@Z
?addHeaderValue@HttpHeaders@httpclient_core@foundation@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V45@@Z
?getClientConfiguration@HttpClient@httpclient_core@foundation@@QEBA?AVClientConfiguration@23@XZ
?getResponseBodyString@HttpResponse@httpclient_core@foundation@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getResponseBody@HttpResponse@httpclient_core@foundation@@QEBAAEAV?$basic_iostream@DU?$char_traits@D@std@@@std@@XZ
??1HttpHeaders@httpclient_core@foundation@@QEAA@XZ
?getResponseCode@HttpResponse@httpclient_core@foundation@@QEBA?AW4HttpResponseCode@23@XZ
??1HttpResponse@httpclient_core@foundation@@UEAA@XZ
??4HttpResponse@httpclient_core@foundation@@QEAAAEAV012@$$QEAV012@@Z
??0HttpResponse@httpclient_core@foundation@@QEAA@XZ
?setRequestBody@HttpRequest@httpclient_core@foundation@@QEAAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1HttpRequest@httpclient_core@foundation@@UEAA@XZ
??0HttpRequest@httpclient_core@foundation@@QEAA@$$QEAV012@@Z
?setClientConfiguration@HttpClient@httpclient_core@foundation@@QEAAXVClientConfiguration@23@@Z
??0HttpRequest@httpclient_core@foundation@@QEAA@W4HttpMethod@12@VURL@12@VHttpHeaders@12@@Z
?setHeaders@HttpMessage@httpclient_core@foundation@@UEAAXVHttpHeaders@23@@Z
??4HttpHeaders@httpclient_core@foundation@@QEAAAEAV012@$$QEAV012@@Z
??0HttpHeaders@httpclient_core@foundation@@QEAA@AEBV012@@Z
??0ClientConfiguration@httpclient_core@foundation@@QEAA@AEBV012@@Z

libmwflurlmanager

?PRODUCT_USAGE@urlmanager@foundation@@3V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@B
?PRODUCT_AUTHORIZATION@urlmanager@foundation@@3V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@B

libmwflurlmgrfactory

?createUrlManager@urlmanager@foundation@@YA?AV?$shared_ptr@VUrlManager@urlmanager@foundation@@@std@@XZ

libmwfoundation_json

?name@?$traits@UUndefined@json@foundation@@@json@foundation@@2QEBDEB
?get_parse_result_description@json@foundation@@YAPEBDW4ParseResult@12@@Z
?name@?$traits@_N@json@foundation@@2QEBDEB
?name@?$traits@N@json@foundation@@2QEBDEB
?name@?$traits@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@json@foundation@@2QEBDEB
?name@?$traits@V?$vector@VValue@json@foundation@@V?$allocator@VValue@json@foundation@@@std@@@std@@@json@foundation@@2QEBDEB
?name@?$traits@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VValue@json@foundation@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VValue@json@foundation@@@std@@@2@@std@@@json@foundation@@2QEBDEB
??0ParserException@json@foundation@@QEAA@AEBV012@@Z
?name@?$traits@_J@json@foundation@@2QEBDEB
?name@?$traits@_K@json@foundation@@2QEBDEB
??_7ParserException@json@foundation@@6B@
??1Value@json@foundation@@QEAA@XZ
??AValue@json@foundation@@QEAAAEAV012@PEBD@Z
??0Value@json@foundation@@QEAA@AEBV012@@Z
??0Value@json@foundation@@QEAA@V?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VValue@json@foundation@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VValue@json@foundation@@@std@@@2@@std@@@Z
??1ParserException@json@foundation@@UEAA@XZ
?serialize@json@foundation@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVValue@12@@Z
?string_to_double@detail@json@foundation@@YANPEBD@Z
?get_utf8_string@detail@json@foundation@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$_String_const_iterator@V?$_String_val@U?$_Simple_types@D@std@@@std@@@5@0@Z
?name@?$traits@M@json@foundation@@2QEBDEB
?u16_to_u8@detail@json@foundation@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEB_SH@Z
??0Value@json@foundation@@QEAA@XZ
??0Value@json@foundation@@QEAA@$$QEAV012@@Z
??4Value@json@foundation@@QEAAAEAV012@$$QEAV012@@Z
??4Value@json@foundation@@QEAAAEAV012@AEBV012@@Z
??0Value@json@foundation@@QEAA@AEBUNull@12@@Z
??0Value@json@foundation@@QEAA@_N@Z
??0Value@json@foundation@@QEAA@N@Z
??0Value@json@foundation@@QEAA@_J@Z
??0Value@json@foundation@@QEAA@_K@Z
??0Value@json@foundation@@QEAA@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Value@json@foundation@@QEAA@PEBD@Z
?name@?$traits@UNull@json@foundation@@@json@foundation@@2QEBDEB
??0Value@json@foundation@@QEAA@V?$vector@VValue@json@foundation@@V?$allocator@VValue@json@foundation@@@std@@@std@@@Z

libmwmatlabconnectorurlmanager

?createUrlManager@urlmanager@matlabconnector@@YA?AV?$shared_ptr@VUrlManager@urlmanager@foundation@@@std@@XZ

libmwollsharedexceptions

??1OnlineLicensingUserUnauthenticatedException@exceptions@shared@onlinelicensing@@UEAA@XZ
??0OnlineLicensingUserUnauthenticatedException@exceptions@shared@onlinelicensing@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0OnlineLicensingNoServerConnectivityException@exceptions@shared@onlinelicensing@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0OnlineLicensingUserUnauthenticatedException@exceptions@shared@onlinelicensing@@QEAA@AEBV0123@@Z
??1OnlineLicensingNoServerConnectivityException@exceptions@shared@onlinelicensing@@UEAA@XZ
??0OnlineLicensingException@exceptions@shared@onlinelicensing@@QEAA@AEBV0123@@Z
??0OnlineLicensingNoServerConnectivityException@exceptions@shared@onlinelicensing@@QEAA@AEBV0123@@Z
??0OnlineLicensingMessageUiException@exceptions@shared@onlinelicensing@@IEAA@AEBV0123@@Z

libmwfoundation_log

??1?$basic_diagnostic_logger@D$$V@log@foundation@@QEAA@XZ
??0?$basic_diagnostic_logger@D$$V@log@foundation@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

mwboost_log-vc143-mt-x64-1_81

?destroy@public_data@record_view@v2_mt_nt6@log@mwboost@@SAXPEBU12345@@Z
?get_logging_enabled@core@v2_mt_nt6@log@mwboost@@QEBA_NXZ
?release_compound@?$stream_provider@D@aux@v2_mt_nt6@log@mwboost@@SAXPEAUstream_compound@12345@@Z
?allocate_compound@?$stream_provider@D@aux@v2_mt_nt6@log@mwboost@@SAPEAUstream_compound@12345@AEAVrecord@345@@Z
?get_severity_level@aux@sources@v2_mt_nt6@log@mwboost@@YAAEA_KXZ
?open_record@core@v2_mt_nt6@log@mwboost@@QEAA?AVrecord@234@AEBVattribute_set@234@@Z
?push_record_move@core@v2_mt_nt6@log@mwboost@@AEAAXAEAVrecord@234@@Z

cppmicroservices3

??1AnyMap@cppmicroservices@@QEAA@XZ
??0const_iter@any_map@cppmicroservices@@QEAA@AEBViter@12@@Z
??1const_iter@any_map@cppmicroservices@@QEAA@XZ
??Cconst_iter@any_map@cppmicroservices@@QEBAPEBU?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VAny@cppmicroservices@@@std@@XZ
??8const_iter@any_map@cppmicroservices@@QEBA_NAEBV012@@Z
??1iter@any_map@cppmicroservices@@QEAA@XZ
?end@any_map@cppmicroservices@@QEAA?AViter@12@XZ
?find@any_map@cppmicroservices@@QEBA?AVconst_iter@12@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetBundleContext@Bundle@cppmicroservices@@QEBA?AVBundleContext@2@XZ
??0ServiceException@cppmicroservices@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBW4Type@01@@Z
?GetDemangledName@detail@cppmicroservices@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVtype_info@@@Z
??0ServiceReferenceBase@cppmicroservices@@QEAA@AEBV01@@Z
??4ServiceReferenceBase@cppmicroservices@@QEAAAEAV01@$$T@Z
??1ServiceReferenceBase@cppmicroservices@@QEAA@XZ
?GetInterfaceId@ServiceReferenceBase@cppmicroservices@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?IsConvertibleTo@ServiceReferenceBase@cppmicroservices@@QEBA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetInterfaceId@ServiceReferenceBase@cppmicroservices@@AEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetServiceReferences@BundleContext@cppmicroservices@@QEAA?AV?$vector@V?$ServiceReference@X@cppmicroservices@@V?$allocator@V?$ServiceReference@X@cppmicroservices@@@std@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@0@Z
??1BundleContext@cppmicroservices@@QEAA@XZ
??0LDAPFilter@cppmicroservices@@QEAA@XZ
??1LDAPFilter@cppmicroservices@@QEAA@XZ
?ToString@LDAPFilter@cppmicroservices@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0ServiceObjectsBase@cppmicroservices@@IEAA@AEBV?$shared_ptr@VBundleContextPrivate@cppmicroservices@@@std@@AEBVServiceReferenceBase@1@@Z
??1ServiceObjectsBase@cppmicroservices@@IEAA@XZ
?GetService@ServiceObjectsBase@cppmicroservices@@IEBA?AV?$shared_ptr@X@std@@XZ
??0ServiceException@cppmicroservices@@QEAA@AEBV01@@Z
??1ServiceException@cppmicroservices@@UEAA@XZ
??1Any@cppmicroservices@@QEAA@XZ
??0AnyMap@cppmicroservices@@QEAA@$$QEAV?$unordered_map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VAny@cppmicroservices@@U?$hash@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VAny@cppmicroservices@@@std@@@2@@std@@@Z
?ToString@Any@cppmicroservices@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

usservicecomponent

??1ComponentInstance@detail@component@service@cppmicroservices@@UEAA@XZ
??0ComponentInstance@detail@component@service@cppmicroservices@@QEAA@XZ

kernel32

ReleaseSRWLockExclusive
AcquireSRWLockExclusive
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
GetCurrentProcess
TerminateProcess

msvcp140

?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?length@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1_K@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Mbrtowc
_Mtx_destroy_in_situ
_Thrd_sleep
?_Xout_of_range@std@@YAXPEBD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?uncaught_exception@std@@YA_NXZ
?uncaught_exceptions@std@@YAHXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
_Mtx_init_in_situ

bcrypt

BCryptOpenAlgorithmProvider
BCryptGenRandom
BCryptCloseAlgorithmProvider

vcruntime140

__std_exception_copy
_purecall
__std_exception_destroy
_CxxThrowException
memcmp
memcpy
memmove
memset
__current_exception
__current_exception_context
__C_specific_handler
__std_type_info_destroy_list
__std_terminate

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_cexit
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_initialize_narrow_environment
_initterm
_initterm_e
terminate
_seh_filter_dll
_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free
calloc

api-ms-win-crt-string-l1-1-0

isupper
isxdigit

api-ms-win-crt-math-l1-1-0

lround
pow
ceilf

Exports

Exports

DeleteInstance_WebServiceClientImpl
NewInstance_WebServiceClientImpl
_us_set_bundle_context_instance_com_mathworks_ollsharedwebserviceclient

Sections

.text
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a8a15fbb3922dfcf985fd016cc9a045

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

04:7d:fd:bb:d1:fd:72:ae:6b:d5:5e:fb:36:2c:ae:e1Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libmwcppmicroservices

libmwi18n

libmwflhttpclient_core

libmwflurlmanager

libmwflurlmgrfactory

libmwfoundation_json

libmwmatlabconnectorurlmanager

libmwollsharedexceptions

libmwfoundation_log

mwboost_log-vc143-mt-x64-1_81

cppmicroservices3

usservicecomponent

kernel32

msvcp140

bcrypt

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 247KB - Virtual size: 247KB

.rdata Size: 73KB - Virtual size: 73KB

.data Size: 6KB - Virtual size: 8KB

.pdata Size: 17KB - Virtual size: 16KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 548B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

04:7d:fd:bb:d1:fd:72:ae:6b:d5:5e:fb:36:2c:ae:e1
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

.text
Size: 247KB - Virtual size: 247KB

.rdata
Size: 73KB - Virtual size: 73KB

.data
Size: 6KB - Virtual size: 8KB

.pdata
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 548B