DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
5a3080155ff59bbd505637fbd1c6abb0_NEIKI.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5a3080155ff59bbd505637fbd1c6abb0_NEIKI.dll
Resource
win10v2004-20240419-en
Target
5a3080155ff59bbd505637fbd1c6abb0_NEIKI
Size
88KB
MD5
5a3080155ff59bbd505637fbd1c6abb0
SHA1
d18051c37b6e1b96408553b0113139885a95ffae
SHA256
ccb67377d4a7519870e600549d70d0c971817484c6b8570ab501efd267bc3333
SHA512
32cafe446c3975acea00d1e98206b71eba77de38d45cd954726b2a19843a3dba3e7ff8d869bb1ee36ede11d4a99a6a258ab7a288b60c706ad173b2c376ececba
SSDEEP
1536:zWCJXN9C3secAMYaeWNPTq3Kgt7n+2BOT5wVkP9ZoFz16:/JXN1echY+PTqx5+2B7kZoFz1
Checks for missing Authenticode signature.
resource |
---|
5a3080155ff59bbd505637fbd1c6abb0_NEIKI |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrlenW
OutputDebugStringA
DisableThreadLibraryCalls
InitializeCriticalSection
lstrlenA
CloseHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
CreateFileA
SetFilePointer
ReadFile
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
TlsSetValue
IsBadWritePtr
SetHandleCount
VirtualAlloc
Sleep
InterlockedExchange
RtlUnwind
RaiseException
HeapFree
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
GetCurrentThreadId
WriteFile
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
GetOEMCP
GetACP
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetProcAddress
LoadLibraryA
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CoCreateInstance
SysStringLen
SysFreeString
SysStringByteLen
SysAllocStringLen
SysAllocString
ord23
ord21
ord16
ord15
ord18
ord57
ord32
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ