DllCanUnloadNow
DllGetClassObject
_DllEntryPoint@12
_DllMain@12
Static task
static1
Behavioral task
behavioral1
Sample
6c2d4e0563a52809e4bdd06902836a80_NEIKI.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
6c2d4e0563a52809e4bdd06902836a80_NEIKI.dll
Resource
win10v2004-20240419-en
Target
6c2d4e0563a52809e4bdd06902836a80_NEIKI
Size
52KB
MD5
6c2d4e0563a52809e4bdd06902836a80
SHA1
26043af836c827df6454449472ca04fa73930ec5
SHA256
c22c0f75fca88b84bc34203f4ba6a589fe7207a83a71d83bfbb5897615e8a73f
SHA512
f5c40da2ac6e880f91187841a33b585bb7cb6239c6182b2b507c9175727b1a7d390ef36bea0f27945e5470a5eae480d5672cbb29064e908427f404998620fcfe
SSDEEP
768:dPd7lwl+ajTQQ900I0Tucam5xoyQAthHr1guQYro0Jb7ft:7hQ3jLTTuS6yNtzo0J1
Checks for missing Authenticode signature.
resource |
---|
6c2d4e0563a52809e4bdd06902836a80_NEIKI |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetWindowsDirectoryA
GetLastError
SetFilePointer
lstrcatA
LeaveCriticalSection
EnterCriticalSection
IsBadWritePtr
WideCharToMultiByte
InitializeCriticalSection
CloseHandle
InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
DeleteCriticalSection
CreateFileA
TerminateProcess
LCMapStringA
GetStringTypeW
GetStringTypeA
LCMapStringW
ExitProcess
LoadLibraryA
MultiByteToWideChar
GetOEMCP
GetACP
DeviceIoControl
ReadFile
SleepEx
GetVersionExA
CreateEventA
WriteFile
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetEnvironmentStringsW
GetProcAddress
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
SendNotifyMessageA
FindWindowA
MessageBoxA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
DllCanUnloadNow
DllGetClassObject
_DllEntryPoint@12
_DllMain@12
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ