DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
914f1c0493c0e5f5fc373e05e1e68110_NEIKI.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
914f1c0493c0e5f5fc373e05e1e68110_NEIKI.dll
Resource
win10v2004-20240426-en
Target
914f1c0493c0e5f5fc373e05e1e68110_NEIKI
Size
94KB
MD5
914f1c0493c0e5f5fc373e05e1e68110
SHA1
c34ff2a99cdfb854ccd47496bddf5fd7ed59ee3b
SHA256
c4f7488f733960f6e6505964a470b841247f5fd1fa54da5b6903ef5190e8b8a5
SHA512
c047082061702a57c517a47f71b78f548548ae13f916fa1a65c903d6c4d96d5070b5c3c27a65e781b89ec1a312a8eb87827a1b4daf16e8f4d7f0148ef0121ccd
SSDEEP
768:IpJ0zx9dGIpGXbtcr8Uu2s8/UT2JTbGdxIiln7FOZa:lzx9dGIpXuq/UT2JvGbIiln7Ia
Checks for missing Authenticode signature.
resource |
---|
914f1c0493c0e5f5fc373e05e1e68110_NEIKI |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
CoCreateInstance
CoTaskMemFree
StringFromGUID2
WindowsCreateString
WindowsGetStringRawBuffer
DisableThreadLibraryCalls
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
_vsnprintf
__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcpy
strcspn
strlen
wcscat
wcscpy
wcslen
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ