GetClassObject
_crt_debugger_hook
Static task
static1
Behavioral task
behavioral1
Sample
6cc57258f485b16f36312ebe2e13f8d0_NEIKI.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6cc57258f485b16f36312ebe2e13f8d0_NEIKI.dll
Resource
win10v2004-20240419-en
Target
6cc57258f485b16f36312ebe2e13f8d0_NEIKI
Size
37KB
MD5
6cc57258f485b16f36312ebe2e13f8d0
SHA1
eda6871f91f6d87ab8eca07c015ee4721dd054d4
SHA256
04055feaeeb59f915c06ffee6811fa8c37bceb6979212912e162658ef45cd6bc
SHA512
aaec9310847fe0af1289f032f7b58e2f841c4b36d0e973cde4e40a16ea433540eee256c6d380207a6d27aa1c2379524b6c714885b034c2306c89e9eca434465c
SSDEEP
384:g80iKJD026YSaVD3oSr/topi0roLN0FHHYQ5otQ5HRIcPInTHzM8D+xjBak9NhXS:griYok1oE0sLeYgV5nITHRDLuhXY7
Checks for missing Authenticode signature.
resource |
---|
6cc57258f485b16f36312ebe2e13f8d0_NEIKI |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapReAlloc
FileTimeToSystemTime
lstrcatW
GetSystemTime
SystemTimeToFileTime
GetSystemTimeAsFileTime
RaiseException
GetModuleFileNameW
InterlockedDecrement
GetTickCount
InterlockedIncrement
InterlockedExchange
CreateFileW
WriteFile
MulDiv
lstrcmpiW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateThread
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
LoadLibraryA
FreeLibrary
GetProcAddress
LocalAlloc
CreateEventW
WaitForSingleObject
lstrcpyW
SetEvent
CloseHandle
DisableThreadLibraryCalls
HeapFree
GetProcessHeap
HeapAlloc
GetLastError
lstrlenW
GlobalUnlock
GlobalAlloc
GlobalLock
DeleteCriticalSection
CreateIconIndirect
CreateIconFromResourceEx
wsprintfW
GetDC
ReleaseDC
GetIconInfo
DestroyIcon
SendMessageTimeoutW
IsWindow
PostThreadMessageW
DispatchMessageW
TranslateMessage
MsgWaitForMultipleObjects
PeekMessageW
DeleteDC
CreateCompatibleBitmap
StretchBlt
SetStretchBltMode
DeleteObject
CreateCompatibleDC
CreateDIBSection
GetDeviceCaps
GetMapMode
GetWindowExtEx
SelectObject
SetMapMode
GetViewportExtEx
CoCreateInstance
OleInitialize
OleUninitialize
CreateBindCtx
CreateStreamOnHGlobal
SysStringLen
VariantChangeType
SysFreeString
SysAllocString
PathFileExistsW
StrToIntExW
PathRemoveFileSpecW
PathAppendW
UrlCanonicalizeW
UrlCombineW
GetClassObject
_crt_debugger_hook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ