module_get_abi_version
module_get_api
module_get_info
Static task
static1
Behavioral task
behavioral1
Sample
98f89f09e4a4c97bcaac2ce46592d500_NEIKI.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
98f89f09e4a4c97bcaac2ce46592d500_NEIKI.dll
Resource
win10v2004-20240419-en
Target
98f89f09e4a4c97bcaac2ce46592d500_NEIKI
Size
444KB
MD5
98f89f09e4a4c97bcaac2ce46592d500
SHA1
a58e3073bf9eca480d59090cca58e2f32671462d
SHA256
dbfc431db3bc48f3f33a9e3b5fdeddbda07d407e2188089ff25428988c1503ae
SHA512
9b1dedf2b292c2dd32bbd33855eb101214fc0d233076cae1e98b58e5fb0741fa361efc01cf6bb239f7cd0be8aa4ea30e51e536c6e23ee405c867c9cb92836eee
SSDEEP
6144:Y+PhOimgB4P3YBAPcwGmuyYg4HGqqnTsjUW7t/06dtJ0Pk0zE6/rDTj2Q6EWp9K/:Y+pO9IZyQ1m76EWDKNxHfhV
Checks for missing Authenticode signature.
resource |
---|
98f89f09e4a4c97bcaac2ce46592d500_NEIKI |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
WriteFile
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
module_get_abi_version
module_get_api
module_get_info
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ