PphAddExceptionToPdp
PphAddExceptionToUrlFilter
PphGetCategoryList
PphGetPccStatus
PphGetPdpItems
PphGetUrlInfo
PphInstallToolbar
PphSetPccStatusChange
Static task
static1
Behavioral task
behavioral1
Sample
368ccfe2e1626d6aa5a271dba054bec0_NEIKI.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
368ccfe2e1626d6aa5a271dba054bec0_NEIKI.dll
Resource
win10v2004-20240419-en
Target
368ccfe2e1626d6aa5a271dba054bec0_NEIKI
Size
232KB
MD5
368ccfe2e1626d6aa5a271dba054bec0
SHA1
f9a29d4669cf5f107f705555c97f828f3e07af03
SHA256
96af1e26bb2c0b081608e99c6df85fd8b556ff06e4d77acd5f4f0580d64d6acc
SHA512
b4167de6921f017159afd1bc28b5fd0c17aaf93f00f6d4bf00ede31a2c4bbe299525a439e6f4e8667c161685e7313d900673c278d7bb08785325419790fa3c1f
SSDEEP
3072:TuoUbHzq44wzIwTIjoVAU1WXpiI2PFmSvq2JdmjVNx4MlUMqqDLy/2UK:cHW44xwqoV1epCNRq27mjqeqqDLu2L
Checks for missing Authenticode signature.
resource |
---|
368ccfe2e1626d6aa5a271dba054bec0_NEIKI |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeLibrary
MultiByteToWideChar
lstrlenA
GetPrivateProfileStringA
InterlockedIncrement
Sleep
InterlockedDecrement
OpenMutexA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentThreadId
lstrcmpA
DisableThreadLibraryCalls
HeapDestroy
GetProcAddress
WideCharToMultiByte
lstrlenW
GetPrivateProfileIntA
lstrcatA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
GetSystemDirectoryA
CreateFileA
LoadLibraryA
GetLastError
GetModuleFileNameW
GetShortPathNameA
GetModuleFileNameA
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
CreateDirectoryA
DeleteFileA
GetTempFileNameA
GetCurrentProcessId
GetEnvironmentVariableA
FindClose
FindNextFileA
RemoveDirectoryA
SetFileAttributesA
GetFileAttributesA
FindFirstFileA
MoveFileExA
WritePrivateProfileStringA
GetLongPathNameA
GetLongPathNameW
IsDBCSLeadByte
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
FlushFileBuffers
SetCurrentDirectoryA
ReadFile
CloseHandle
GetFileSize
SetFilePointer
GetVersionExA
GetShortPathNameW
FreeEnvironmentStringsA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
RtlUnwind
InterlockedExchange
GetStartupInfoA
lstrcpynA
HeapFree
SetHandleCount
IsBadWritePtr
GetStdHandle
VirtualFree
HeapCreate
VirtualAlloc
GetCurrentThread
TlsGetValue
GetModuleHandleA
IsValidLocale
SetStdHandle
SetConsoleCtrlHandler
UnhandledExceptionFilter
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
GetFileType
HeapReAlloc
HeapSize
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
GetOEMCP
FatalAppExitA
GetCPInfo
GetACP
TlsFree
TlsSetValue
TlsAlloc
SetLastError
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
LoadStringA
PeekMessageA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
StringFromGUID2
CLSIDFromString
CoCreateInstance
SafeArrayAccessData
VariantInit
SafeArrayUnaccessData
SafeArrayGetVartype
SysAllocString
VariantClear
SafeArrayCopy
SafeArrayGetElement
SysAllocStringLen
SafeArrayCreate
SysFreeString
SafeArrayDestroy
SafeArrayPutElement
htons
inet_addr
gethostbyname
gethostbyaddr
getservbyname
WSAGetLastError
WSACleanup
WSAStartup
ntohl
ntohs
getservbyport
htonl
inet_ntoa
WSASetLastError
PphAddExceptionToPdp
PphAddExceptionToUrlFilter
PphGetCategoryList
PphGetPccStatus
PphGetPdpItems
PphGetUrlInfo
PphInstallToolbar
PphSetPccStatusChange
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ