CREATE
SHUTDOWN
Static task
static1
Behavioral task
behavioral1
Sample
d67a7bb537543d3d0f76f3bac79a0ba0_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d67a7bb537543d3d0f76f3bac79a0ba0_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
Target
d67a7bb537543d3d0f76f3bac79a0ba0_NeikiAnalytics
Size
38KB
MD5
d67a7bb537543d3d0f76f3bac79a0ba0
SHA1
cf2d37e46f7017f45554361b153179db888a2a8c
SHA256
0362c123d12a79d85413c3e5fc9bde253f78626ec2aefdb8dd0710ed6572ce43
SHA512
a7909ef7fee526699ff3d6df5f18ea625ca463c69bd7350173cb59469aed4d3294a7498505e436fb55c7575b17602f411b002d9bdd9d28d7011d9be0a93bc900
SSDEEP
768:36UPkwWEKP3H9nmohtLSEvCUED7nTBpyqcS:36U8wWTPXP5X6md
Checks for missing Authenticode signature.
resource |
---|
d67a7bb537543d3d0f76f3bac79a0ba0_NeikiAnalytics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentThreadId
DecodePointer
GetCommandLineA
EncodePointer
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetLastError
InterlockedDecrement
GetProcAddress
HeapFree
Sleep
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
CREATE
SHUTDOWN
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ