DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
b7789f6520aa1cd4d096badd7f8bb0a0_NEIKI.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b7789f6520aa1cd4d096badd7f8bb0a0_NEIKI.dll
Resource
win10v2004-20240419-en
Target
b7789f6520aa1cd4d096badd7f8bb0a0_NEIKI
Size
436KB
MD5
b7789f6520aa1cd4d096badd7f8bb0a0
SHA1
1d91ef1ab957b22f53243ee939712cee8a0d5048
SHA256
11381fda123c7b6c4b5370c1c9a6c695f9df2a394aed5220768552d7ca87e24d
SHA512
37f5ea98c70bb2c51484ba83790f279399e393cc45245892658e6305f73607f5ad054e7b72cabf5704dacd92429473400339b7a538e712c0f9a9b4da1d9e3af1
SSDEEP
12288:xKp1z/7/L/f7G/7/L/fA/7/L/fo9t22Un2e:Qz/7/L/jG/7/L/I/7/L/4twnh
Checks for missing Authenticode signature.
resource |
---|
b7789f6520aa1cd4d096badd7f8bb0a0_NEIKI |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatW
GlobalUnlock
GlobalLock
GlobalAlloc
DisableThreadLibraryCalls
MultiByteToWideChar
MulDiv
FlushInstructionCache
GetCurrentProcess
lstrcpynW
lstrcmpW
FreeLibrary
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameW
lstrcmpiW
GetProcessHeap
InterlockedExchange
HeapFree
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrcpyW
lstrlenW
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetVersionExA
ExitProcess
QueryPerformanceCounter
GetTickCount
EndPaint
CallWindowProcW
GetDesktopWindow
InvalidateRgn
BeginPaint
ReleaseDC
GetDC
GetClientRect
FillRect
DestroyAcceleratorTable
GetWindow
IsChild
GetFocus
SetFocus
SendMessageW
GetDlgItem
IsWindow
RedrawWindow
SetWindowPos
GetClassNameW
GetParent
CreateAcceleratorTableW
CreateWindowExW
wsprintfW
InvalidateRect
SetCapture
ReleaseCapture
GetSysColor
RegisterWindowMessageW
GetClassInfoExW
LoadCursorW
RegisterClassExW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
DefWindowProcW
UnregisterClassW
GetWindowLongW
SetWindowLongW
CharNextW
DestroyWindow
CreateSolidBrush
GetStockObject
GetObjectW
DeleteObject
SelectObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDeviceCaps
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
OleLockRunning
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
SysStringLen
SysAllocString
LoadRegTypeLi
VariantInit
VariantClear
OleCreateFontIndirect
VarUI4FromStr
SysStringByteLen
SysAllocStringByteLen
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysFreeString
SysAllocStringLen
PathFindExtensionW
__security_error_handler
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
malloc
?terminate@@YAXXZ
free
_CxxThrowException
_except_handler3
??3@YAXPAX@Z
__CxxFrameHandler
??_V@YAXPAX@Z
_purecall
wcsncpy
??_U@YAPAXI@Z
??2@YAPAXI@Z
memset
??1type_info@@UAE@XZ
realloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ