c:\WorkSrc\simlocktool\1112\GenSimLockImgSrc\GenSimLockImg\Debug\GenSimLockImg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a1175b649a2af0d70b807078820664f8a29526e4884e1e007d2c98742e064453_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a1175b649a2af0d70b807078820664f8a29526e4884e1e007d2c98742e064453_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
a1175b649a2af0d70b807078820664f8a29526e4884e1e007d2c98742e064453_NeikiAnalytics.exe
-
Size
545KB
-
MD5
84925ee20e9b72aae1baab4e5596f4a0
-
SHA1
1a4311b9956bd3a2837e60182730a9fd647a1d1d
-
SHA256
a1175b649a2af0d70b807078820664f8a29526e4884e1e007d2c98742e064453
-
SHA512
9c0ddd0f59151893804e22c4f40d495d5366f07d1094f91bcfd57eaf1e6b28b5fdb745c87846461c0397ea52ccad5b9e08b5459bf5b9162f2143c8e06aacd86c
-
SSDEEP
12288:iF7Ui4QO7akAFygPBcdkk9js6Ri5UPoFGCh0NE:COG3cdkj6P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1175b649a2af0d70b807078820664f8a29526e4884e1e007d2c98742e064453_NeikiAnalytics.exe
Files
-
a1175b649a2af0d70b807078820664f8a29526e4884e1e007d2c98742e064453_NeikiAnalytics.exe.exe windows:5 windows x86 arch:x86
785966e11c6002acb92f5a86d757ee1c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SystemTimeToFileTime
GetSystemTime
OutputDebugStringA
PurgeComm
Sleep
SetCommTimeouts
GetCommTimeouts
SetupComm
SetCommMask
SetCommState
GetCommState
CreateEventA
CreateFileA
WriteFile
ReadFile
CloseHandle
GetTickCount
GetModuleFileNameW
WriteConsoleW
GetFileType
GetStdHandle
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
DebugBreak
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
GetProcAddress
LoadLibraryA
LCMapStringA
GetLastError
LCMapStringW
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
GetModuleHandleW
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetCurrentThread
ExitProcess
SetConsoleCtrlHandler
LoadLibraryW
HeapValidate
IsBadReadPtr
GetConsoleCP
GetConsoleMode
RtlUnwind
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
FatalAppExitA
OutputDebugStringW
HeapAlloc
GetProcessHeap
VirtualQuery
FreeLibrary
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
InterlockedExchange
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
HeapSize
HeapReAlloc
VirtualAlloc
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
GetTimeZoneInformation
GetLocaleInfoW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.textbss Size: - Virtual size: 214KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 446KB - Virtual size: 445KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ