Eap3Host.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b53ed02399f86eb53678ff2d3fc53125039553c0a6c33da345c6346c5f112be5_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b53ed02399f86eb53678ff2d3fc53125039553c0a6c33da345c6346c5f112be5_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
b53ed02399f86eb53678ff2d3fc53125039553c0a6c33da345c6346c5f112be5_NeikiAnalytics.exe
-
Size
37KB
-
MD5
874f4300e12e5873cccac40848ec69a0
-
SHA1
ab9ea839f35811631df38eb55e46b6eb21b90799
-
SHA256
b53ed02399f86eb53678ff2d3fc53125039553c0a6c33da345c6346c5f112be5
-
SHA512
a6cf2ad350e78c29c4b4b10a8a43f889b4d12668674a6ed080c0b6583b1c3291dcb6298d40c645c6343e98e15f17cc4f62ad9ec5a651db6e06b0844d1ce20031
-
SSDEEP
768:eawO4QMhaApJ+Cbr7RR9GIqWy5MSbmLLqiwh30KWJtF7zGEYxO:eRbaApour7H9GI1ykPZVH3GdxO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b53ed02399f86eb53678ff2d3fc53125039553c0a6c33da345c6346c5f112be5_NeikiAnalytics.exe
Files
-
b53ed02399f86eb53678ff2d3fc53125039553c0a6c33da345c6346c5f112be5_NeikiAnalytics.exe.exe windows:6 windows x86 arch:x86
b6cafad45349d7b139f3ce44bfe7d55d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
CloseServiceHandle
kernel32
InterlockedIncrement
InterlockedDecrement
SetEvent
CreateEventW
GetLastError
MultiByteToWideChar
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
user32
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageW
PostQuitMessage
PeekMessageW
msvcrt
__setusermatherr
__p__commode
_exit
__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_amsg_exit
_initterm
_acmdln
exit
__p__fmode
_ismbblead
_controlfp
_XcptFilter
??3@YAXPAX@Z
??2@YAPAXI@Z
wcschr
_cexit
__getmainargs
memset
printf
ole32
CoRegisterClassObject
CoInitializeEx
CoTaskMemAlloc
CLSIDFromString
CoInitializeSecurity
CoUninitialize
CoGetClassObject
CoRevokeClassObject
CoRegisterSurrogate
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE