_boot_Win32__ChangeNotify
boot_Win32__ChangeNotify
Static task
static1
Behavioral task
behavioral1
Sample
4504b1a6e51828986c8424b7a3a867f0_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4504b1a6e51828986c8424b7a3a867f0_NeikiAnalytics.dll
Resource
win10v2004-20240226-en
Target
4504b1a6e51828986c8424b7a3a867f0_NeikiAnalytics
Size
24KB
MD5
4504b1a6e51828986c8424b7a3a867f0
SHA1
99bb54492d86fa710c7cea624f28d06e2ce5c35d
SHA256
bdf4d7fdd56ab954018b3fdb347e23f2c54f11b5fb64fd6873aa8d752f659d51
SHA512
8c0d52f33d75c1f5658337f6a3aa4484079a9b6aefd57a45f5fc35c288aff11b5148957c38a9c006e5bcedb547fdeb64f02de0b5bb0dc12a47eed1a4ecac9e8b
SSDEEP
192:wa1COS0fTLUEeYrpBOjeP6O1lTBqkjjh8Fxj:waoT0f/UEeYdB5CulTBhh8Fx
Checks for missing Authenticode signature.
resource |
---|
4504b1a6e51828986c8424b7a3a867f0_NeikiAnalytics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Perl_croak_nocontext
Perl_sv_derived_from
Perl_sv_2iv
Perl_Tcurcop_ptr
Perl_croak
Perl_newXS
Perl_IEnv_ptr
Perl_Iwidesyscalls_ptr
Perl_Tna_ptr
Perl_sv_2pv
Perl_Top_ptr
Perl_Tcurpad_ptr
Perl_sv_newmortal
Perl_sv_setiv
Perl_Isv_undef_ptr
Perl_sv_setref_pv
Perl_get_context
Perl_Tstack_sp_ptr
Perl_Tmarkstack_ptr_ptr
Perl_Tstack_base_ptr
Perl_get_sv
Perl_form
Perl_Isv_yes_ptr
Perl_mg_set
Perl_sv_setpv
FindCloseChangeNotification
FindNextChangeNotification
MultiByteToWideChar
FindFirstChangeNotificationW
FindFirstChangeNotificationA
DisableThreadLibraryCalls
_adjust_fdiv
malloc
_initterm
free
_errno
strcmp
strncmp
_boot_Win32__ChangeNotify
boot_Win32__ChangeNotify
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ