__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
5c3c0c779f6658469e75903a6d2590c0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5c3c0c779f6658469e75903a6d2590c0_NEIKI.exe
Resource
win10v2004-20240419-en
Target
5c3c0c779f6658469e75903a6d2590c0_NEIKI
Size
79KB
MD5
5c3c0c779f6658469e75903a6d2590c0
SHA1
b51d37f7116d7adf8694cdcf1cf0676a5338b724
SHA256
c48c0a51400a864ffabed98c67ed7f114a40551fb1ff7318c08a527f4a34e634
SHA512
76e9078f1393e944959bf4b1a6b39f18c5359a7b2b3544222b83c842258a8734ff717a04a541b8e1eb8952919783afeb12c088f594a239f7f71630ff87ce06f1
SSDEEP
1536:zvWCa/ulb6mOQA8AkqUhMb2nuy5wgIP0CSJ+5yDB8GMGlZ5G:zvWH2lb6jGdqU7uy5w9WMyDN5G
Checks for missing Authenticode signature.
resource |
---|
5c3c0c779f6658469e75903a6d2590c0_NEIKI |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetExitCodeProcess
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetTickCount
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ