getinitdata
getptr
Static task
static1
Behavioral task
behavioral1
Sample
d8d647b3e6758d79bc316705a189e1a0_NEIKI.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d8d647b3e6758d79bc316705a189e1a0_NEIKI.dll
Resource
win10v2004-20240419-en
Target
d8d647b3e6758d79bc316705a189e1a0_NEIKI
Size
48KB
MD5
d8d647b3e6758d79bc316705a189e1a0
SHA1
f3ea74c7cffbdd8be38178d04a3c57b10337b9a7
SHA256
b2696bc4507e95583396cf54d48f2dd9f5e3ef42b0e2aa0d6b68f3bbb53be4d9
SHA512
fde7f5fc9860961e5013782c32df36348bfc9c956275f8234756094645cd51864b72f98abd297b0d0e76807198341ce95202ce4d2a7ea45d950db74f3e785bcb
SSDEEP
768:XCNCKcabTVxYeoMor1aXGTrSgNMh+/8o9fj:SpcgTVxYdZFrRuhpo
Checks for missing Authenticode signature.
resource |
---|
d8d647b3e6758d79bc316705a189e1a0_NEIKI |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord28
ord29
ord41
ord78
ord4
ord35
ord3
ord16
ord42
ord33
ord61
ord34
ord151
ord153
ord46
ord48
ord51
ord107
ord45
ord52
ord144
ord139
WideCharToMultiByte
FreeEnvironmentStringsW
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
LoadLibraryA
GetProcAddress
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
HeapReAlloc
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
getinitdata
getptr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ