CleanPrereq
ConfigurePrereqLauncher
DoAppSearchEx
DownloadPrereq
EstimateExtractFiles
ExtractPrereq
ExtractSourceFiles
InstallPostPrereq
InstallPrereq
VerifyPrereq
Static task
static1
Behavioral task
behavioral1
Sample
6abc14fbcbc19289f7dad80f6f8b56b0_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6abc14fbcbc19289f7dad80f6f8b56b0_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
Target
6abc14fbcbc19289f7dad80f6f8b56b0_NeikiAnalytics
Size
529KB
MD5
6abc14fbcbc19289f7dad80f6f8b56b0
SHA1
fc09cb98de1eb0ea76ddfa2797e53dc1888c5c3c
SHA256
aeae04753d61f468956cb6dccec31b38d3ccb5e926efd234c77dcfaec744ec80
SHA512
7a8d3495171dc9873d331b4564e20ee6b07b55ae8eac1994c1d6cd11601950f0cf6a7a98a04c581c71058004b28039dfb6f5e61f93858f0d027bd7c667e351c0
SSDEEP
12288:h1eRTBbI5tTlpivpB8NlsATUUamggNVL2Ld1rlr:Lwapo8HsAum5NVLI1
Checks for missing Authenticode signature.
resource |
---|
6abc14fbcbc19289f7dad80f6f8b56b0_NeikiAnalytics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord114
ord67
ord89
ord145
ord17
ord8
ord121
ord64
ord116
ord118
ord115
ord166
ord159
ord32
ord120
ord204
ord160
ord74
ord171
ord158
ord52
ord33
ord49
ord140
ord147
ord54
ord139
ord58
ord62
ord47
ord125
ord103
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetSystemInfo
VirtualAlloc
VirtualProtect
RaiseException
DeleteCriticalSection
InitializeCriticalSection
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
GetSystemTime
CreateFileA
GetFileSize
FindFirstFileA
GetLocaleInfoA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
CloseHandle
ReadFile
GetVersion
GetVersionExA
FindResourceA
SizeofResource
LockResource
LoadResource
FindResourceExA
FindClose
WideCharToMultiByte
InterlockedExchange
GetACP
GetThreadLocale
FormatMessageA
GetTempPathA
GetTempFileNameA
DeleteFileA
FindNextFileA
RemoveDirectoryA
SetLastError
CreateDirectoryA
lstrlenA
GetLogicalDriveStringsA
GetDriveTypeA
GetDiskFreeSpaceExA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetEnvironmentVariableA
GetModuleHandleA
GetCurrentProcess
GetExitCodeThread
CreateThread
VirtualQuery
SetEvent
SetFilePointer
MoveFileA
WriteFile
Sleep
FlushFileBuffers
ResetEvent
lstrcmpiA
CreateNamedPipeA
ConnectNamedPipe
MultiByteToWideChar
FindFirstFileW
DeleteFileW
SearchPathA
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
lstrcpynA
LoadLibraryExA
lstrlenW
LeaveCriticalSection
EnterCriticalSection
GetSystemDirectoryW
GetModuleHandleW
CopyFileW
GetSystemDefaultLangID
GetCurrentProcessId
CreateFileW
GetCurrentThreadId
GetLocalTime
GetStdHandle
GetSystemTimeAsFileTime
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
LocalAlloc
GetCommandLineA
RtlUnwind
ExitProcess
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
GetOEMCP
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CreateEventA
GetDesktopWindow
CharNextA
FindWindowA
IsWindowVisible
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
CloseServiceHandle
OpenSCManagerA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
OpenServiceA
QueryServiceStatus
StartServiceA
RegDeleteKeyA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExW
ShellExecuteExW
SHGetMalloc
ShellExecuteExA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CLSIDFromString
CoCreateInstance
SysFreeString
SysAllocString
VarUI4FromStr
PathGetArgsW
PathUnquoteSpacesW
PathRemoveArgsW
PathFileExistsW
CleanPrereq
ConfigurePrereqLauncher
DoAppSearchEx
DownloadPrereq
EstimateExtractFiles
ExtractPrereq
ExtractSourceFiles
InstallPostPrereq
InstallPrereq
VerifyPrereq
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ