DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
6a4064ad802a61761fa70de65e7c4b90_NEIKI.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6a4064ad802a61761fa70de65e7c4b90_NEIKI.dll
Resource
win10v2004-20240419-en
Target
6a4064ad802a61761fa70de65e7c4b90_NEIKI
Size
312KB
MD5
6a4064ad802a61761fa70de65e7c4b90
SHA1
a53d872ee3209760b40a960747609dc1fa17d314
SHA256
52b1f228160e468d2ac0e7911f071a3177a89d239ba0f2caba24b5e07fec22f6
SHA512
3233be0d6298eba3d52e740f5bad772e88c747313d6e51e9df75db29d70f0e7a276618a564e1df1bcb130fcbc5c69825d8fc2813e5e068dfacb3e40a5fd3ecad
SSDEEP
3072:C/RVc9Z0l7mVAgN5ZG6wavmRUHK/9BrTmR3LUqLfX6ezHMGzhVCt/:anlgNvxpeGHK/9BriAN1Lt/
Checks for missing Authenticode signature.
resource |
---|
6a4064ad802a61761fa70de65e7c4b90_NEIKI |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CloseServiceHandle
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
StartServiceW
DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
GetComputerNameW
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount64
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
LoadLibraryW
LoadResource
MultiByteToWideChar
RaiseException
RtlUnwind
SizeofResource
Sleep
lstrcmpW
_vsnprintf
CreateStreamOnHGlobal
SysAllocString
SysFreeString
VariantClear
NdrClientInitializeNew
NdrConformantStringBufferSize
NdrConformantStringMarshall
NdrConvert
NdrFreeBuffer
NdrGetBuffer
NdrPointerBufferSize
NdrPointerMarshall
NdrPointerUnmarshall
NdrSendReceive
NdrSimpleStructMarshall
NdrSimpleStructUnmarshall
RpcBindingFromStringBindingW
RpcRaiseException
RpcStringBindingComposeW
RpcStringFreeW
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
_wcsicmp
free
fwrite
getenv
memcmp
memcpy
memmove
strchr
strcmp
strcpy
strcspn
strlen
wcsrchr
wcstol
CreateXmlReader
DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ