6f55f03412f946e527365c3261154d34e937755b598cebdcff478f906bf7ff3a_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6f55f03412f946e527365c3261154d34e937755b598cebdcff478f906bf7ff3a_NeikiAnalytics.exe
Size

264KB
MD5

a3378beaaa38e60feeebbcbb52266420
SHA1

b95f85c152202ad78349cd857b5dc5dfac92862b
SHA256

6f55f03412f946e527365c3261154d34e937755b598cebdcff478f906bf7ff3a
SHA512

909d5496d1293df21cc4ed554758734e87ee4a0e4a2c4f4d30c1ddb1ad90c39cf7b98b5b7a53cc13dca039712910e107b77cb2bd1bffba9eedd49ccd414c34cc
SSDEEP

3072:hXeUG8buBex6joaY+8BK8h5xB/PFPFSEmkqiLd3x33dU88chvAxbmrKP:teUG8buHj2/DLrHQchvAxTP

Score

1^/10

Malware Config

Signatures

Files

6f55f03412f946e527365c3261154d34e937755b598cebdcff478f906bf7ff3a_NeikiAnalytics.exe
.dll windows:6 windows x64 arch:x64

1012b9a17af1e8025149bd764b12d729

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:7d:fd:bb:d1:fd:72:ae:6b:d5:5e:fb:36:2c:ae:e1
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

15/05/2023, 00:00

Not After

14/05/2026, 23:59

Subject

CN=The MathWorks\, Inc.,O=The MathWorks\, Inc.,L=Natick,ST=Massachusetts,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

B:\matlab\bin\win64\connector_plugins\connector\message_service\libmwconnectormessageserviceactivator.pdb

Imports

libmwfl

?terminate@diag@core@foundation@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBDH1@Z

libmwcppmicroservices

?getFramework@cppmicroservices@foundation@@YA?AV?$shared_ptr@VFramework@cppmicroservices@@@std@@XZ

libmwconnectorcommon

?delay@common@connector@@YA?AV?$shared_ptr@VCanceller@TickManager@common@connector@@@std@@V?$function@$$A6AX_J@Z@4@_J@Z
?randomString@common@connector@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@E@Z

libmwconnectorbayeuxapi

??1BayeuxSession@bayeux@connector@@UEAA@XZ
??0BayeuxSession@bayeux@connector@@IEAA@XZ

libmwconnectormessageserviceapi

?setFactoryOptionsMappings@MessageServiceFactory@message_service@connector@@UEAAXV?$vector@UOptionsMapping@message_service@connector@@V?$allocator@UOptionsMapping@message_service@connector@@@std@@@std@@@Z
?getFactoryOptionsMappings@MessageServiceFactory@message_service@connector@@UEAA?AV?$vector@UOptionsMapping@message_service@connector@@V?$allocator@UOptionsMapping@message_service@connector@@@std@@@std@@XZ
?markCallbackRunning@detail@message_service@connector@@YA?AUMarkedCallback@123@AEBV?$function@$$A6AXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z@std@@@Z
??1MarkedCallback@detail@message_service@connector@@QEAA@XZ
?notify@MarkedCallback@detail@message_service@connector@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

libmwconnectormessageserviceimpl

?createMessageService@MessageServiceFactoryServerDelegate@message_service@connector@@UEAA?AV?$Future@V?$shared_ptr@VMessageService@message_service@connector@@@std@@@3@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$unordered_map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$hash@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@6@@Z
?getFactoryOptionsMappings@MessageServiceFactoryDelegatorImpl@message_service@connector@@UEAA?AV?$vector@UOptionsMapping@message_service@connector@@V?$allocator@UOptionsMapping@message_service@connector@@@std@@@std@@XZ
?getMessageService@MessageServiceFactoryServerDelegate@message_service@connector@@UEAA?AV?$shared_ptr@VMessageService@message_service@connector@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
??0MessageServiceFactoryDelegatorImpl@message_service@connector@@QEAA@V?$shared_ptr@VMessageServiceFactoryDelegate@message_service@connector@@@std@@0@Z
??1MessageServiceFactoryDelegatorImpl@message_service@connector@@UEAA@XZ
??0MessageServiceFactoryClientDelegate@message_service@connector@@QEAA@V?$shared_ptr@VConnector@connector@@@std@@@Z
??1MessageServiceFactoryClientDelegate@message_service@connector@@UEAA@XZ
??1MessageServiceFactoryServerDelegate@message_service@connector@@UEAA@XZ
?getMessageService@MessageServiceFactoryClientDelegate@message_service@connector@@UEAA?AV?$shared_ptr@VMessageService@message_service@connector@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
?createMessageService@MessageServiceFactoryDelegatorImpl@message_service@connector@@UEAA?AV?$Future@V?$shared_ptr@VMessageService@message_service@connector@@@std@@@3@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$unordered_map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$hash@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@6@@Z
?getMessageService@MessageServiceFactoryDelegatorImpl@message_service@connector@@UEAA?AV?$shared_ptr@VMessageService@message_service@connector@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
?setFactoryOptionsMappings@MessageServiceFactoryDelegatorImpl@message_service@connector@@UEAAXV?$vector@UOptionsMapping@message_service@connector@@V?$allocator@UOptionsMapping@message_service@connector@@@std@@@std@@@Z
?createMessageService@MessageServiceFactoryClientDelegate@message_service@connector@@UEAA?AV?$Future@V?$shared_ptr@VMessageService@message_service@connector@@@std@@@3@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV?$unordered_map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$hash@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@6@@Z
??0MessageServiceFactoryServerDelegate@message_service@connector@@QEAA@V?$shared_ptr@VBayeuxServer@bayeux@connector@@@std@@@Z

libmwfoundation_log

?decrease@indent_attribute@detail@log@foundation@@QEAAXXZ
??0?$basic_diagnostic_logger@D$$V@log@foundation@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1?$basic_diagnostic_logger@D$$V@log@foundation@@QEAA@XZ
?get@admin@local@log@foundation@@SA?AV?$shared_ptr@Vadmin@local@log@foundation@@@mwboost@@XZ
?increase@indent_attribute@detail@log@foundation@@QEAAXXZ

mwboost_log-vc143-mt-x64-1_81

?get_logging_enabled@core@v2_mt_nt6@log@mwboost@@QEBA_NXZ
?destroy@public_data@record_view@v2_mt_nt6@log@mwboost@@SAXPEBU12345@@Z
?push_record_move@core@v2_mt_nt6@log@mwboost@@AEAAXAEAVrecord@234@@Z
?get_severity_level@aux@sources@v2_mt_nt6@log@mwboost@@YAAEA_KXZ
?allocate_compound@?$stream_provider@D@aux@v2_mt_nt6@log@mwboost@@SAPEAUstream_compound@12345@AEAVrecord@345@@Z
?release_compound@?$stream_provider@D@aux@v2_mt_nt6@log@mwboost@@SAXPEAUstream_compound@12345@@Z
?detach_from_record@?$basic_record_ostream@D@v2_mt_nt6@log@mwboost@@QEAAXXZ
?init_stream@?$basic_record_ostream@D@v2_mt_nt6@log@mwboost@@AEAAXXZ
?open_record@core@v2_mt_nt6@log@mwboost@@QEAA?AVrecord@234@AEBVattribute_set@234@@Z

cppmicroservices3

?any_value_to_json@cppmicroservices@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AEAV23@_NEH@Z
??BServiceReferenceBase@cppmicroservices@@QEBA_NXZ
??0ServiceReferenceBase@cppmicroservices@@QEAA@AEBV01@@Z
?GetDemangledName@detail@cppmicroservices@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVtype_info@@@Z
??0ServiceException@cppmicroservices@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBW4Type@01@@Z
??BListenerToken@cppmicroservices@@QEBA_NXZ
??4ListenerToken@cppmicroservices@@QEAAAEAV01@$$QEAV01@@Z
??0ListenerToken@cppmicroservices@@QEAA@$$QEAV01@@Z
??0ListenerToken@cppmicroservices@@QEAA@XZ
?GetBundleContext@Bundle@cppmicroservices@@QEBA?AVBundleContext@2@XZ
??0AnyMap@cppmicroservices@@QEAA@AEBV01@@Z
??1AnyMap@cppmicroservices@@QEAA@XZ
?AtCompoundKey@AnyMap@cppmicroservices@@QEBA?AVAny@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V32@@Z
??0any_map@cppmicroservices@@QEAA@AEBV01@@Z
?ThrowBadAnyCastException@detail@cppmicroservices@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVtype_info@@1@Z
??1Any@cppmicroservices@@QEAA@XZ
?Type@Any@cppmicroservices@@QEBAAEBVtype_info@@XZ
?ToStringNoExcept@Any@cppmicroservices@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?ToString@Any@cppmicroservices@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?Empty@Any@cppmicroservices@@QEBA_NXZ
??0Any@cppmicroservices@@QEAA@XZ
??1ServiceReferenceBase@cppmicroservices@@QEAA@XZ
?GetProperty@ServiceReferenceBase@cppmicroservices@@QEBA?AVAny@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetUsingBundles@ServiceReferenceBase@cppmicroservices@@QEBA?AV?$vector@VBundle@cppmicroservices@@V?$allocator@VBundle@cppmicroservices@@@std@@@std@@XZ
?GetInterfaceId@ServiceReferenceBase@cppmicroservices@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?IsConvertibleTo@ServiceReferenceBase@cppmicroservices@@QEBA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??8ServiceReferenceBase@cppmicroservices@@QEBA_NAEBV01@@Z
?SetInterfaceId@ServiceReferenceBase@cppmicroservices@@AEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1ServiceException@cppmicroservices@@UEAA@XZ
??0ServiceException@cppmicroservices@@QEAA@AEBV01@@Z
?GetType@ServiceEvent@cppmicroservices@@QEBA?AW4Type@12@XZ
?GetServiceReference@ServiceEvent@cppmicroservices@@QEBA?AV?$ServiceReference@X@2@XZ
??4BundleContext@cppmicroservices@@QEAAAEAV01@$$QEAV01@@Z
??1BundleContext@cppmicroservices@@QEAA@XZ
?RemoveListener@BundleContext@cppmicroservices@@QEAAXVListenerToken@2@@Z
?AddServiceListener@BundleContext@cppmicroservices@@QEAA?AVListenerToken@2@AEBV?$function@$$A6AXAEBVServiceEvent@cppmicroservices@@@Z@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z
?GetService@BundleContext@cppmicroservices@@QEAA?AV?$shared_ptr@X@std@@AEBVServiceReferenceBase@2@@Z
?GetServiceReferences@BundleContext@cppmicroservices@@QEAA?AV?$vector@V?$ServiceReference@X@cppmicroservices@@V?$allocator@V?$ServiceReference@X@cppmicroservices@@@std@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@0@Z
??BBundleContext@cppmicroservices@@QEBA_NXZ
??0BundleContext@cppmicroservices@@QEAA@XZ
??4ServiceReferenceBase@cppmicroservices@@QEAAAEAV01@$$T@Z

usservicecomponent

??0ComponentInstance@detail@component@service@cppmicroservices@@QEAA@XZ
??1ComponentInstance@detail@component@service@cppmicroservices@@UEAA@XZ

kernel32

AcquireSRWLockExclusive
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress

msvcp140

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_function_call@std@@YAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?uncaught_exception@std@@YA_NXZ
?uncaught_exceptions@std@@YAHXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Thrd_yield
_Thrd_id
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?_Syserror_map@std@@YAPEBDH@Z
_Mbrtowc
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?length@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1_K@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?good@ios_base@std@@QEBA_NXZ
?exceptions@ios_base@std@@QEAAXH@Z
?flags@ios_base@std@@QEBAHXZ
?flags@ios_base@std@@QEAAHH@Z
?precision@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

vcruntime140

_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
__std_type_info_compare
__std_type_info_destroy_list
__current_exception_context
__current_exception
__C_specific_handler
memset
memmove
_CxxThrowException
memcmp
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh
calloc

api-ms-win-crt-math-l1-1-0

ceilf

Exports

Exports

DeleteInstance_connector_message_service_MessageServiceDeferredLoader
DeleteInstance_connector_message_service_MessageServiceFactoryClientDelegate
DeleteInstance_connector_message_service_MessageServiceFactoryDelegatorImpl
DeleteInstance_connector_message_service_MessageServiceFactoryServerDelegate
NewInstance_connector_message_service_MessageServiceDeferredLoader
NewInstance_connector_message_service_MessageServiceFactoryClientDelegate
NewInstance_connector_message_service_MessageServiceFactoryDelegatorImpl
NewInstance_connector_message_service_MessageServiceFactoryServerDelegate
_us_set_bundle_context_instance_com_mathworks_connectormessageserviceactivator

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1012b9a17af1e8025149bd764b12d729

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

04:7d:fd:bb:d1:fd:72:ae:6b:d5:5e:fb:36:2c:ae:e1Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libmwfl

libmwcppmicroservices

libmwconnectorcommon

libmwconnectorbayeuxapi

libmwconnectormessageserviceapi

libmwconnectormessageserviceimpl

libmwfoundation_log

mwboost_log-vc143-mt-x64-1_81

cppmicroservices3

usservicecomponent

kernel32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 160KB

.rdata Size: 66KB - Virtual size: 66KB

.data Size: 9KB - Virtual size: 9KB

.pdata Size: 14KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 796B

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

04:7d:fd:bb:d1:fd:72:ae:6b:d5:5e:fb:36:2c:ae:e1
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

.text
Size: 160KB - Virtual size: 160KB

.rdata
Size: 66KB - Virtual size: 66KB

.data
Size: 9KB - Virtual size: 9KB

.pdata
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 796B