D:\temp\mva-v920_uwumodul_1843304988_e\usr\tmp\mva-v920_uwumodul_1843304988_e\uwumodul.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ab7f7456a12bdd01e5deb7db25a9874264af2e9e8b8affed317649ea094e2a30_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ab7f7456a12bdd01e5deb7db25a9874264af2e9e8b8affed317649ea094e2a30_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
General
-
Target
ab7f7456a12bdd01e5deb7db25a9874264af2e9e8b8affed317649ea094e2a30_NeikiAnalytics.exe
-
Size
172KB
-
MD5
6bf34f000e7be70f3334d3f923f9f7a0
-
SHA1
6e625d3017ee07a6315af96dc4893112287c372d
-
SHA256
ab7f7456a12bdd01e5deb7db25a9874264af2e9e8b8affed317649ea094e2a30
-
SHA512
06014113795a1605ee136daff22a4ab8acd53bc5c303fcab834ac9f649d78a7d6ebb118ac648fba9a47a5a3f5b086ea4778b51236285c9cc64bff15e30a13405
-
SSDEEP
3072:u25aq4//OI+Ia91J8pjmC8OftF7cok2UfjUrtDSimG/6N:ffC/OI+IO8p88/a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab7f7456a12bdd01e5deb7db25a9874264af2e9e8b8affed317649ea094e2a30_NeikiAnalytics.exe
Files
-
ab7f7456a12bdd01e5deb7db25a9874264af2e9e8b8affed317649ea094e2a30_NeikiAnalytics.exe.dll windows:4 windows x86 arch:x86
8e683ddad903ae7863bf9eec78c4de34
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
RaiseException
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapAlloc
UnhandledExceptionFilter
HeapFree
VirtualAlloc
LoadLibraryA
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
Sleep
LCMapStringA
LCMapStringW
IsValidLocale
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
GetLocaleInfoW
FlushFileBuffers
GetTimeZoneInformation
CloseHandle
SetStdHandle
SetFilePointer
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapReAlloc
Exports
Exports
mcn_main
Sections
.text Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
HTSTACK_ Size: 4KB - Virtual size: 85B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
WZSTCOM_ Size: 4KB - Virtual size: 449B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
WZSTRIP_ Size: 4KB - Virtual size: 93B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
TKCALLFU Size: 4KB - Virtual size: 351B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BRIDGEST Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ