CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
b150eaff3287a70b3d01a36ed593c4c0_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b150eaff3287a70b3d01a36ed593c4c0_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
Target
b150eaff3287a70b3d01a36ed593c4c0_NeikiAnalytics
Size
4.2MB
MD5
b150eaff3287a70b3d01a36ed593c4c0
SHA1
e19717ba85f87bb5b039cb6b23a2bc990868f13f
SHA256
5a2df44b25ed1f2ce76e4caee618448caf9bc08642623c788d0c0ca5a539be19
SHA512
98e2f7f24d755257381941d7337a3a868ed4ebdca6369a59638cf4a9ae36152304f486c6f8bc40e549aeef2d721c6756e28207ae3a0b6bf16d81683ae1d09dc0
SSDEEP
49152:jzTQ1onqSZKo+gqSucPCQFcI2mBitn6b45bVW4b3qF5Q0bpm/frSlj01xBTVBli:vsczcIb6nFN
Checks for missing Authenticode signature.
resource |
---|
b150eaff3287a70b3d01a36ed593c4c0_NeikiAnalytics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CreatePlugInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ