_ReadDataFromFile@16
_WriteDataToFile@16
Static task
static1
Behavioral task
behavioral1
Sample
c313ef855d9abbd9b9bb8d76d9353c40_NEIKI.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
c313ef855d9abbd9b9bb8d76d9353c40_NEIKI.dll
Resource
win10v2004-20240508-en
Target
c313ef855d9abbd9b9bb8d76d9353c40_NEIKI
Size
244KB
MD5
c313ef855d9abbd9b9bb8d76d9353c40
SHA1
8c149c7fa337e58fdf9374e07b5bc9073eb73cd7
SHA256
89ff3eb1af79c6ef8b2ce6fd934d937c8037ff25cf4bde4ae21c8bda28d87686
SHA512
a733d1e2571bc5528dd5561f0682395b91d78b2bd7d18839887649aef2b85e0b535af3fbd9dcba638062e0bd26a349aa27d6238344274bde2c02050d1975f818
SSDEEP
3072:MisRhZ1oIMn87nnAQVG/LytaKItS/fiLKS+f5Aq7i:M1/VLOTeHI8HiL7+f5
Checks for missing Authenticode signature.
resource |
---|
c313ef855d9abbd9b9bb8d76d9353c40_NEIKI |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetLastError
CloseHandle
InitializeCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
ReadFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
_ReadDataFromFile@16
_WriteDataToFile@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE