ExtractFiles
ExtractOneFile
GetGrapholicPluginInfo
IsSupported
Static task
static1
Behavioral task
behavioral1
Sample
60b1cf374e7aec3ab5dfbaef24c0aeb0_NEIKI.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
60b1cf374e7aec3ab5dfbaef24c0aeb0_NEIKI.dll
Resource
win10v2004-20240226-en
Target
60b1cf374e7aec3ab5dfbaef24c0aeb0_NEIKI
Size
32KB
MD5
60b1cf374e7aec3ab5dfbaef24c0aeb0
SHA1
58b1a0f997276e519903775fb35b78b8895f8b52
SHA256
3132283145baa0905b8e8167c4fed038f584733cc9f4d6be024107187c259498
SHA512
af0cf4859031b45eef18e768fc4ef3c8d811d550e968bfabf170f6d7b9433a23dcffbedc54b7713a207950d805ff4ccfb0bca4b23d8859124cda4b495aedbf63
SSDEEP
384:nu3oyHAwkoWCTxL1tPkHumliwnIxJBorOlVm:nyoMvWCTZ1tcnI3BorOHm
Checks for missing Authenticode signature.
resource |
---|
60b1cf374e7aec3ab5dfbaef24c0aeb0_NEIKI |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CloseHandle
WaitForSingleObject
CreateProcessA
GetFileType
GetStdHandle
RtlUnwind
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
GetExitCodeProcess
SetHandleCount
LoadLibraryA
WriteFile
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
GetStringTypeW
HeapAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
VirtualAlloc
HeapReAlloc
GetProcAddress
wsprintfA
LoadStringA
ExtractFiles
ExtractOneFile
GetGrapholicPluginInfo
IsSupported
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ