DisableFB
GoThis
GoThisBack
GoThisImp2
Static task
static1
Behavioral task
behavioral1
Sample
4126559ab934081a21583a20aeded990_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4126559ab934081a21583a20aeded990_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
Target
4126559ab934081a21583a20aeded990_NeikiAnalytics
Size
32KB
MD5
4126559ab934081a21583a20aeded990
SHA1
cd385fb38a99857fb172be33318dd7a759f5a3d7
SHA256
aeb5d2d9d7ee28fbbbf1e75e9b023c7cf4ec66a28c9ee07edbcb4e0c7a3fa414
SHA512
d3919f6d44391a18b7c409d97a125e261f00877de44aa32151598cdc147429f4f0d203709cd04e2d51ed076dc74b7ef4e8f12f0ac6601cf704ae19822995ea79
SSDEEP
384:tcXb9gaU2lYVJWlDIvmCpSDQOTStcuxz3iH:igablAJ0DIvmCwD5snV3K
Checks for missing Authenticode signature.
resource |
---|
4126559ab934081a21583a20aeded990_NeikiAnalytics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ReleaseMutex
WaitForSingleObject
CreateMutexA
CreateFileA
GetShortPathNameA
GetFileAttributesA
SearchPathA
FreeLibrary
LoadLibraryA
GetCurrentProcess
lstrcpynA
SetLastError
Sleep
GetVersionExA
SetEvent
InterlockedDecrement
GetLastError
lstrlenA
lstrcatA
lstrcpyA
GetModuleFileNameW
ExpandEnvironmentStringsW
DeviceIoControl
CloseHandle
GetModuleHandleA
GetProcAddress
GetVersionExW
GetCurrentProcessId
QueryPerformanceCounter
lstrcatW
lstrcpyW
lstrcmpiW
GetShortPathNameW
HeapFree
lstrlenW
GetProcessHeap
CreateEventA
HeapAlloc
CharToOemA
wsprintfA
AllocateAndInitializeSid
GetLengthSid
CopySid
FreeSid
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ControlService
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle
CreateServiceA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
SetSecurityDescriptorDacl
SHGetSpecialFolderLocation
SHGetPathFromIDListW
CoTaskMemFree
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
??2@YAPAXI@Z
memcpy
memset
memcmp
??3@YAXPAX@Z
DisableFB
GoThis
GoThisBack
GoThisImp2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ