D:\home\mtk14060\AutoScriptBackup\Project\WCP2_CleanRoom\DA\Download_Agent_Main\Raphael-lib\_Output\windows\Release\FlashtoollibEx.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4a308eea5fad75b8907ec1b761641a514b19ee9470222ecbc608588b9d088655_NeikiAnalytics.dll
Resource
win7-20240508-en
windows7-x64
7 signatures
150 seconds
General
-
Target
4a308eea5fad75b8907ec1b761641a514b19ee9470222ecbc608588b9d088655_NeikiAnalytics.exe
-
Size
5.0MB
-
MD5
84c8a997a557c9b6d1b489f7b5912930
-
SHA1
c9eeaa7e1c1e23949bcdba6e24255ae4baea48f0
-
SHA256
4a308eea5fad75b8907ec1b761641a514b19ee9470222ecbc608588b9d088655
-
SHA512
ae15dae96f4838e972b6673c5abe9b7ab4b8957cd398cdec3faaab84ecc3ca53b2fced26ce27c6323c60d39ff8955a87926effb446fd9955b5c1b684f97f5259
-
SSDEEP
98304:1PvQgags6nAKrDrYqaGY3mr1XU9D7tnQHfjDE7ZC240Xp3lzvy46evYv2sGCv7r:1Qgags6nAKrDrYqaGY3mr1XU91QHfjDZ
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 4a308eea5fad75b8907ec1b761641a514b19ee9470222ecbc608588b9d088655_NeikiAnalytics.exe
Files
-
4a308eea5fad75b8907ec1b761641a514b19ee9470222ecbc608588b9d088655_NeikiAnalytics.exe.dll windows:5 windows x86 arch:x86
71c31d186b758b6fce322317cf5c7279
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
CancelIo
PurgeComm
QueryPerformanceFrequency
CloseHandle
GetModuleFileNameA
GetComputerNameExA
GetLocalTime
GetVersionExA
GetTickCount
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
InterlockedExchange
EscapeCommFunction
InterlockedExchangeAdd
TlsAlloc
TlsFree
GetProcAddress
LoadLibraryA
WaitForMultipleObjects
GetFileSizeEx
WaitForSingleObjectEx
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcess
CreateSemaphoreA
ReleaseSemaphore
DuplicateHandle
GetOverlappedResult
ReadFile
CreateEventA
SetCommTimeouts
SetCommState
WriteFile
GetProcessHeap
SetEvent
HeapFree
QueryPerformanceCounter
GetCommState
ClearCommError
HeapAlloc
CreateFileA
SetupComm
lstrcpyA
GetModuleHandleA
GetLastError
SetFilePointerEx
ClearCommBreak
CreateThread
EnterCriticalSection
GetEnvironmentVariableW
GetStringTypeExW
GetStringTypeExA
SetWaitableTimer
CreateWaitableTimerA
GetSystemInfo
ResumeThread
OpenEventA
ResetEvent
AreFileApisANSI
GetFullPathNameW
GetWindowsDirectoryW
GetDiskFreeSpaceExW
MoveFileExW
SetFileAttributesW
SetFileTime
GetFileTime
GetFileAttributesExW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CopyFileW
CreateDirectoryExW
GetFileAttributesW
OutputDebugStringA
GetModuleHandleExW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedCompareExchange
SetLastError
TlsGetValue
TlsSetValue
DeleteFiber
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleW
GetVersion
GetFileType
GetStdHandle
ConvertFiberToThread
GetCurrentProcessId
FreeLibrary
LoadLibraryW
FindNextFileW
FindFirstFileW
FindClose
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
ExitThread
Sleep
InitializeCriticalSection
GetLocaleInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCPInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
SetConsoleCtrlHandler
GetTimeFormatA
GetDateFormatA
GetCommandLineA
RtlUnwind
RaiseException
WriteConsoleW
ExitProcess
GetDriveTypeA
FindFirstFileA
HeapValidate
IsBadReadPtr
LCMapStringA
LCMapStringW
GetStringTypeW
CompareStringW
CompareStringA
GetACP
GetOEMCP
IsValidCodePage
DebugBreak
OutputDebugStringW
GetStringTypeA
SetStdHandle
SetHandleCount
GetStartupInfoA
GetTimeZoneInformation
FlushFileBuffers
GetConsoleCP
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
GetCurrentDirectoryA
GetFullPathNameA
HeapSize
HeapReAlloc
VirtualAlloc
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
VirtualQuery
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
WaitForMultipleObjectsEx
FormatMessageA
LocalFree
RemoveDirectoryW
DeleteFileW
DeviceIoControl
user32
RegisterClassExA
GetMessageA
PostQuitMessage
SendMessageA
CreateWindowExA
DefWindowProcA
DispatchMessageA
UnregisterDeviceNotification
RegisterDeviceNotificationA
LoadStringA
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
LoadStringW
setupapi
SetupDiGetClassDescriptionA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
secur32
GetUserNameExA
ws2_32
WSACleanup
ntohs
htons
htonl
ntohl
WSAStartup
WSAGetLastError
closesocket
recv
WSASetLastError
send
advapi32
CryptEnumProvidersW
CryptDestroyKey
CryptGetProvParam
CryptAcquireContextW
CryptGetUserKey
CryptExportKey
CryptDestroyHash
CryptSignHashW
CryptSetHashParam
CryptCreateHash
CryptDecrypt
DeregisterEventSource
ReportEventW
RegisterEventSourceW
CryptGenRandom
CryptReleaseContext
crypt32
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertDuplicateCertificateContext
Exports
Exports
_flashtool_clear_last_errmsg@4
_flashtool_connect_brom_with_handle@20
_flashtool_customize_impl@8
_flashtool_efuse_read_all@8
_flashtool_efuse_write_all@8
_flashtool_generate_gpx@12
_flashtool_is_chiptype_match@20
_flashtool_set_last_errmsg@8
_flashtool_trans_modem_type@12
_meta_start_boot_mode@28
flashtool_cleanup
flashtool_connect_brom
flashtool_connect_da
flashtool_create_session
flashtool_create_session_with_handle
flashtool_destroy_session
flashtool_device_control
flashtool_download
flashtool_download_cert
flashtool_enable_dram
flashtool_firmware_update
flashtool_format
flashtool_format_partition
flashtool_generate_checksum
flashtool_get_com_handle
flashtool_get_device_info
flashtool_get_hrid
flashtool_get_last_errmsg
flashtool_get_lib_info
flashtool_get_rpmb_status
flashtool_get_rsc_cnt
flashtool_get_rsc_info
flashtool_get_scatter_info
flashtool_if_lib_da_match
flashtool_image_checksum
flashtool_memory_test
flashtool_otp_zone_operation
flashtool_pl_chanllenge
flashtool_query_tracking_status
flashtool_read_partition_table
flashtool_readback
flashtool_reconnect_com
flashtool_set_boot_flag
flashtool_set_log_folder
flashtool_set_log_level
flashtool_set_rsc_info
flashtool_set_scatter_path
flashtool_set_ufs_config
flashtool_shutdown_device
flashtool_startup
flashtool_switch_com
flashtool_tell_device_change_com
flashtool_test
flashtool_upgrade
flashtool_upload
flashtool_waitfor_com
flashtool_write_data
get_revised_scatter_partitions
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 938KB - Virtual size: 938KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 229KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE