AddMsg
CloseFileMapping
CloseFileMapping_readonly
GetPatcherWindowHandle
GetPluginDataMemory
GetRegDword
GetRegString
LoadFileMapping
Reg_Delete_Value
SearchAndReplace
SetRegDword
SetRegString
write_disk_file
Behavioral task
behavioral1
Sample
ac1c43f014174f244607bcf4f2779fe0_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
ac1c43f014174f244607bcf4f2779fe0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Target
ac1c43f014174f244607bcf4f2779fe0_NeikiAnalytics
Size
165KB
MD5
ac1c43f014174f244607bcf4f2779fe0
SHA1
24a6f32d04d4e5f662d52a14b9407c5b05e02892
SHA256
8d0f56a10dd2d0be99d86832b12c7ca8ff348d800bfc542a570e3eb30ffa07be
SHA512
613ce3db4f78cdc8b9447cc3167ceeec38df966b770fe82acacd69e845da413eb08acb4a29a5af40a7f052b79ce2c0c4f86203b48b0b3a9fc950548ab30ab9ef
SSDEEP
3072:5kSJ/VAggE7ktOKAeNvzCFJ1JA8qWjU22lQBV+UdE+rECWp7hKcWNi:6SVVAggYktOjeRCFLJAnWVBV+UdvrEFn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ac1c43f014174f244607bcf4f2779fe0_NeikiAnalytics |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
AddMsg
CloseFileMapping
CloseFileMapping_readonly
GetPatcherWindowHandle
GetPluginDataMemory
GetRegDword
GetRegString
LoadFileMapping
Reg_Delete_Value
SearchAndReplace
SetRegDword
SetRegString
write_disk_file
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE