markdown_fastapi_rs.pdb
Static task
static1
Behavioral task
behavioral1
Sample
23beddcb1234466b5c017f4c84392d51813ad9197315ec5653785b222ac0aa95_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
23beddcb1234466b5c017f4c84392d51813ad9197315ec5653785b222ac0aa95_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
General
-
Target
23beddcb1234466b5c017f4c84392d51813ad9197315ec5653785b222ac0aa95_NeikiAnalytics.exe
-
Size
1.5MB
-
MD5
e11057475a7d57c39075fcf605525540
-
SHA1
c2a7f78dd33bd321240b473ace183b2b157b4c2b
-
SHA256
23beddcb1234466b5c017f4c84392d51813ad9197315ec5653785b222ac0aa95
-
SHA512
6f3b529af40fa6dc0deee7a97f47957f27c09d2f6ea1ff0e6f485f2779d15e38734ce3a8a2a9bb924983dd88a85317daed8acf6281903ccd4826aa32410fa716
-
SSDEEP
24576:WiUwPozKjvFLtCU9OdH9t5jJz3zhDZxkNWYBue5FX5hO4/P:Wis4L79it5jJzSNW+/P
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23beddcb1234466b5c017f4c84392d51813ad9197315ec5653785b222ac0aa95_NeikiAnalytics.exe
Files
-
23beddcb1234466b5c017f4c84392d51813ad9197315ec5653785b222ac0aa95_NeikiAnalytics.exe.dll windows:6 windows x86 arch:x86
3553b18517fa7fcd1ec294416e5191f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
bcryptprimitives
ProcessPrng
kernel32
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentDirectoryW
SetLastError
ReleaseMutex
RtlCaptureContext
GetCurrentThread
GetCurrentProcess
GetStdHandle
GetCurrentProcessId
QueryPerformanceCounter
WaitForSingleObject
TerminateProcess
QueryPerformanceFrequency
HeapFree
SetUnhandledExceptionFilter
WaitForSingleObjectEx
LoadLibraryA
lstrlenW
CreateMutexA
GetProcessHeap
GetLastError
GetConsoleMode
GetModuleHandleW
FormatMessageW
MultiByteToWideChar
WriteConsoleW
InitOnceBeginInitialize
TlsAlloc
InitOnceComplete
TlsFree
GetProcAddress
GetModuleHandleA
Sleep
CloseHandle
TlsSetValue
TlsGetValue
GetEnvironmentVariableW
HeapAlloc
HeapReAlloc
IsProcessorFeaturePresent
ntdll
RtlNtStatusToDosError
NtWriteFile
python310
PyErr_SetString
PyErr_Fetch
PyErr_SetObject
PyErr_GivenExceptionMatches
PyGILState_Release
PyException_SetCause
PyException_GetCause
PyErr_WriteUnraisable
Py_IsInitialized
PyExc_SystemError
PyGILState_Ensure
_Py_NoneStruct
PyUnicode_InternInPlace
PyExc_ImportError
PyExc_ValueError
PyInterpreterState_GetID
PyList_New
PyList_Append
PyObject_Repr
PyObject_Str
PyBytes_AsString
PyBytes_Size
PyErr_NormalizeException
PyExc_AttributeError
PyModule_GetNameObject
PyUnicode_AsEncodedString
PyExc_UnicodeDecodeError
PyException_SetTraceback
PyErr_PrintEx
PyErr_NewExceptionWithDoc
PyErr_Print
PyExc_BaseException
PyModule_Create2
PyCMethod_New
PyObject_GetAttr
PyObject_SetAttr
_Py_Dealloc
PyUnicode_FromStringAndSize
PyExc_TypeError
PyErr_Restore
PyException_GetTraceback
PyUnicode_AsUTF8AndSize
PyTuple_New
PyInterpreterState_Get
vcruntime140
memcpy
_except_handler4_common
memcmp
__CxxFrameHandler3
memmove
memset
_CxxThrowException
__std_type_info_destroy_list
api-ms-win-crt-string-l1-1-0
strlen
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_execute_onexit_table
_cexit
api-ms-win-crt-heap-l1-1-0
free
Exports
Exports
PyInit_markdown_fastapi_rs
Sections
.text Size: 954KB - Virtual size: 954KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 490KB - Virtual size: 489KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ