DeployUtil.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a1e90345fda90cb3426499de8c1d072cdc772ffc9e04a5f7162b20c76a751ffe_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
General
-
Target
a1e90345fda90cb3426499de8c1d072cdc772ffc9e04a5f7162b20c76a751ffe_NeikiAnalytics.exe
-
Size
1.2MB
-
MD5
817553a309d21c306e7cd08850ab0b60
-
SHA1
226c57ba09f317ced0cd06515b927b3d4de1f9ea
-
SHA256
a1e90345fda90cb3426499de8c1d072cdc772ffc9e04a5f7162b20c76a751ffe
-
SHA512
e64c044dbba389c6d0568f17606aca360a05dd21e5823e148652f81653e17f5e97daad893a93834e03d50d753bb8271622b2064d90c9ff12a5c6cdf70c943c40
-
SSDEEP
12288:DjwMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:DjZSkQ/7Gb8NLEbeZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1e90345fda90cb3426499de8c1d072cdc772ffc9e04a5f7162b20c76a751ffe_NeikiAnalytics.exe
Files
-
a1e90345fda90cb3426499de8c1d072cdc772ffc9e04a5f7162b20c76a751ffe_NeikiAnalytics.exe.exe windows:10 windows x86 arch:x86
cf613155ca9926133f8acb2bda2a73d2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcrt
__CxxFrameHandler3
?terminate@@YAXXZ
_controlfp
__setusermatherr
__p__fmode
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
_except_handler4_common
_callnewh
wprintf
realloc
free
_wcsnicmp
malloc
memmove_s
_purecall
_initterm
memset
api-ms-win-core-file-l1-2-1
GetFullPathNameW
api-ms-win-core-errorhandling-l1-1-1
SetUnhandledExceptionFilter
GetLastError
RaiseException
UnhandledExceptionFilter
api-ms-win-core-winrt-l1-1-0
RoUninitialize
RoInitialize
RoGetActivationFactory
RoActivateInstance
api-ms-win-core-com-l1-1-1
CoUninitialize
CoTaskMemAlloc
CoGetApartmentType
CoInitializeEx
api-ms-win-core-winrt-string-l1-1-0
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateStringReference
oleaut32
SysFreeString
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-synch-l1-2-0
ReleaseSRWLockExclusive
AcquireSRWLockShared
CreateEventExW
AcquireSRWLockExclusive
Sleep
ReleaseSRWLockShared
InitializeSRWLock
SetEvent
WaitForSingleObject
api-ms-win-core-winrt-error-l1-1-1
SetRestrictedErrorInfo
RoGetMatchingRestrictedErrorInfo
RoOriginateError
RoTransformError
api-ms-win-core-libraryloader-l1-2-0
GetModuleHandleA
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-processthreads-l1-1-2
TerminateProcess
GetCurrentThreadId
GetCurrentProcess
GetCurrentProcessId
api-ms-win-core-sysinfo-l1-2-1
GetTickCount
GetSystemTimeAsFileTime
urlmon
CreateUri
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE