GetStringA
MessageBoxP
Static task
static1
Behavioral task
behavioral1
Sample
cb9f4165d6f650c933408a08d686ae60_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cb9f4165d6f650c933408a08d686ae60_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
cb9f4165d6f650c933408a08d686ae60_NeikiAnalytics
Size
54KB
MD5
cb9f4165d6f650c933408a08d686ae60
SHA1
67241a43931c1e3fcbcf339b3431f3db105fd8ee
SHA256
ef0ac082326c108e2815f244112ccb4401ab2790518c25972fec124a410df193
SHA512
0f211057812513ccc4d42d4ae4960f5c81782994dab41003d1f1c470562264357082ff91ac687d0071dfd1d80721d66732505741b3f6df98ae18577a2a2b0d84
SSDEEP
1536:U8wJFKnDOdi35571pmc0i4ffuJNh+F888RlCfK:U80FMydi557XOlfuJlLbj
Checks for missing Authenticode signature.
resource |
---|
cb9f4165d6f650c933408a08d686ae60_NeikiAnalytics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
GetLastError
GetLocaleInfoA
lstrlenA
GetVersionExA
GetCurrentThreadId
FormatMessageA
lstrcatA
lstrcpyA
GetVersion
VirtualFree
HeapCreate
LoadLibraryA
VirtualAlloc
GetStringTypeW
GetStringTypeA
WriteFile
WideCharToMultiByte
GetCommandLineA
GetProcAddress
GetModuleHandleA
DisableThreadLibraryCalls
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
HeapDestroy
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
GetWindowLongA
FindWindowA
CallNextHookEx
UnhookWindowsHookEx
MessageBoxW
SetWindowsHookExA
MessageBoxA
CreateFontIndirectA
GetObjectA
DeleteObject
GetStringA
MessageBoxP
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ