C:\Other\Code\FetusBlaster\MODEL_TOOL\Release\noegl_opengl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b70ae0de034a95d9608ccb60bf84d82a5d161c9c5081515fb23b9b102d94bcb0_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b70ae0de034a95d9608ccb60bf84d82a5d161c9c5081515fb23b9b102d94bcb0_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
General
-
Target
b70ae0de034a95d9608ccb60bf84d82a5d161c9c5081515fb23b9b102d94bcb0_NeikiAnalytics.exe
-
Size
351KB
-
MD5
a1720f6351f3628ec225abc300d31610
-
SHA1
65459c9e498f59db65ea028c4487349ac666b2bf
-
SHA256
b70ae0de034a95d9608ccb60bf84d82a5d161c9c5081515fb23b9b102d94bcb0
-
SHA512
81ef01a2f84762d7ed3f7c5b5f7b94c39d6e015c2cd64ed2d59a2fd6fe58c5f0327fe5dd3742b28bb56d362a443fa86d08eac4a713cbb8b88a1100569cdc8750
-
SSDEEP
6144:Nduc5AoVPV0cJjSBrnQ6fbjuNGwhGxmAOUA2vMd3NfT:N4c5AoVPV9JjSBLQ+xmiAUG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b70ae0de034a95d9608ccb60bf84d82a5d161c9c5081515fb23b9b102d94bcb0_NeikiAnalytics.exe
Files
-
b70ae0de034a95d9608ccb60bf84d82a5d161c9c5081515fb23b9b102d94bcb0_NeikiAnalytics.exe.dll windows:5 windows x86 arch:x86
ce11400feeb08110f2a495295ac077d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
opengl32
glNormalPointer
glFinish
glDeleteTextures
glLightf
glLightModelfv
glLightfv
glDisableClientState
glDrawElements
glVertexPointer
glColorPointer
glTexCoordPointer
glEnableClientState
glGetError
glLoadMatrixf
glMatrixMode
glAlphaFunc
glPolygonOffset
glLineWidth
glPointSize
glPolygonMode
glCullFace
glDepthFunc
glColorMask
glDepthMask
glBlendFunc
glScissor
glBindTexture
glDisable
glEnable
glColor3f
glColor3fv
glColor4f
glColor4fv
glTexCoord3f
glTexCoord3fv
glTexCoord2f
glTexCoord2fv
glVertex2f
glVertex2fv
glVertex3f
glVertex3fv
glEnd
glBegin
glClear
wglDeleteContext
glHint
glGenTextures
wglGetProcAddress
glGenLists
glViewport
glPushAttrib
glGetFloatv
wglUseFontBitmapsW
glDrawBuffer
glCopyTexImage2D
glTexParameteri
wglMakeCurrent
glListBase
glGetTexImage
glShadeModel
glGetString
glPopAttrib
glTexImage2D
glRasterPos2f
glCallLists
glTexParameterf
glClearColor
glDeleteLists
wglCreateContext
glGetIntegerv
glClearDepth
kernel32
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
GetFileType
SetHandleCount
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentProcessId
HeapDestroy
HeapCreate
GetModuleFileNameW
GetStdHandle
WriteFile
HeapSize
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
GetCommandLineA
GetCurrentThreadId
ExitProcess
GetModuleHandleW
GetProcAddress
HeapReAlloc
HeapFree
GetLastError
HeapAlloc
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
InitializeCriticalSectionAndSpinCount
GetOEMCP
IsValidCodePage
MultiByteToWideChar
SetStdHandle
WriteConsoleW
LCMapStringW
Sleep
FlushFileBuffers
CloseHandle
CreateFileW
GetStringTypeW
GetACP
user32
MessageBoxW
GetAsyncKeyState
GetWindowRect
GetClientRect
GetDC
ShowCursor
GetForegroundWindow
GetWindowLongW
GetCursorPos
ClipCursor
AdjustWindowRectEx
ValidateRect
MessageBoxA
gdi32
SwapBuffers
ChoosePixelFormat
SelectObject
DeleteObject
CreateFontA
DescribePixelFormat
SetPixelFormat
Exports
Exports
NGL_Init
NGL_Shutdown
Sections
.text Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 438KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ