DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d6bcf3416d11bc523cb2e93b2bcd5d60_NEIKI.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6bcf3416d11bc523cb2e93b2bcd5d60_NEIKI.dll
Resource
win10v2004-20240426-en
Target
d6bcf3416d11bc523cb2e93b2bcd5d60_NEIKI
Size
132KB
MD5
d6bcf3416d11bc523cb2e93b2bcd5d60
SHA1
0224fd481f37176fe4765973dcb886ba0d33ffd7
SHA256
f54b46c140dc814b9f3a036cf05ef86d0d79681d631d479cfa477d54fad6219a
SHA512
9437e2cd7934e63cf60651206d600d272fe3ad60bfdbab50e76595f798a8f2007d2ab7736f0408f91fd3f6fbfbab62513d981fd5d2a7d09860d2e5ccf5aaff8e
SSDEEP
3072:4+i6y4KkovCzU17x8r5cJwpD3Y//DQAMZqE:47p3vjf8rwwpD0/E
Checks for missing Authenticode signature.
resource |
---|
d6bcf3416d11bc523cb2e93b2bcd5d60_NEIKI |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcmpiA
IsDBCSLeadByte
lstrcpynA
HeapDestroy
lstrcpyA
lstrcatA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
DisableThreadLibraryCalls
SizeofResource
LoadResource
FindResourceA
GetLastError
LoadLibraryExA
GetShortPathNameA
ResetEvent
SetEvent
CloseHandle
IsBadWritePtr
IsBadCodePtr
IsBadReadPtr
CreateEventA
WaitForMultipleObjects
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleA
TlsFree
SetLastError
TlsGetValue
lstrlenA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
LCMapStringA
LCMapStringW
RtlUnwind
VirtualProtect
GetSystemInfo
VirtualQuery
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
MessageBoxW
CharNextA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumValueA
RegEnumKeyExA
RegSetValueExA
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
StringFromCLSID
SysAllocString
VarUI4FromStr
RegisterTypeLi
LoadTypeLi
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ