DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
89c35f5f7b21fc5db1fc4d3ac97715b0_NEIKI.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
89c35f5f7b21fc5db1fc4d3ac97715b0_NEIKI.dll
Resource
win10v2004-20240419-en
Target
89c35f5f7b21fc5db1fc4d3ac97715b0_NEIKI
Size
471KB
MD5
89c35f5f7b21fc5db1fc4d3ac97715b0
SHA1
9e462330c95a865746e5743a1186eb4ac707c807
SHA256
94f77e513eb6ea6449e8e23d1cfbe2fd139d94706c4bdb012f0da4793a675cf3
SHA512
e39a20e508e291618400dd5328ee61ef42a16ecf14715703042a429ee92c85083202c10e871e846cced2bf00eb198bc80833597aa7ecd73bf3d6ddf69dd41875
SSDEEP
12288:1kKRTiPeIdj8ULepFqgKLgnF2Sk/ivthkX:LRePeKj8GepFWcV
Checks for missing Authenticode signature.
resource |
---|
89c35f5f7b21fc5db1fc4d3ac97715b0_NEIKI |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE