GetEntityCount
GetEntityInfo
ProduceEntity
Static task
static1
Behavioral task
behavioral1
Sample
35839fc98c9a04ca05028f2301199b00_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
35839fc98c9a04ca05028f2301199b00_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
35839fc98c9a04ca05028f2301199b00_NeikiAnalytics
Size
752KB
MD5
35839fc98c9a04ca05028f2301199b00
SHA1
e16bbe80179a94b8bb085f6939120c3ab00e4b32
SHA256
3368f4c8e33601069b21d76f04ea41b4fd0abcfc86f42d1fd5b2842f83e02469
SHA512
c22fee67613ea51a1acd7f7ee6bc93c52e910f30be1e1075471968fa43c9df763ca0eb8c01e663e1fa99656498a21ddf9c839cead628ce8302054949e464e9c6
SSDEEP
12288:idGNy/8rAdTcxHklnMXt2708NL9vHRy1zXQQqy8l3y670aORf:idGEFdTclkl8t208NLVHRgXQQqycC67G
Checks for missing Authenticode signature.
resource |
---|
35839fc98c9a04ca05028f2301199b00_NeikiAnalytics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord1105
ord858
ord924
ord2820
ord3811
ord2818
ord3337
ord537
ord3790
ord926
ord922
ord2827
ord540
ord860
ord800
ord823
ord5861
ord6143
ord815
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord3953
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord551
ord2915
ord5572
ord939
ord2107
ord2044
ord2448
ord2841
ord6394
ord5834
ord5450
ord3663
ord4058
ord4202
ord4129
ord5856
ord5710
ord5708
ord775
ord1261
ord3703
ord5192
ord1994
ord4291
ord6123
ord1787
ord1006
ord2609
ord6322
ord2395
ord5658
ord3062
ord4274
ord3069
ord5010
ord2490
ord1774
ord6121
ord5242
ord3314
ord3316
ord269
ord826
ord600
ord1578
ord6467
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord1116
ord535
ord941
ord4277
ord4278
ord6663
ord668
ord3181
ord2781
ord2770
ord356
ord2764
ord268
ord317
ord1567
ord923
ord3169
ord4099
ord6282
ord503
ord2721
ord6877
ord2763
ord3345
ord2614
ord3029
ord2919
strcpy
_timezone
memset
_purecall
__CxxFrameHandler
tolower
sprintf
_tzset
_mbscmp
strlen
strcmp
atof
_makepath
strcat
wcslen
_stricmp
_except_handler3
?terminate@@YAXXZ
memcpy
sscanf
atoi
_splitpath
time
fclose
fwrite
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
fopen
WaitNamedPipeA
DeleteFileA
LocalAlloc
LocalFree
CreateProcessA
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentThreadId
Sleep
SetEvent
EnterCriticalSection
LeaveCriticalSection
CreateFileA
WaitForSingleObject
TerminateThread
CloseHandle
CreateEventA
InitializeCriticalSection
CopyFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
CreateDirectoryA
GetDiskFreeSpaceExA
GetDriveTypeA
GetLogicalDriveStringsA
GetSystemDirectoryA
GetWindowsDirectoryA
SetFilePointer
WriteFile
SetSystemTime
GetModuleFileNameA
DeleteCriticalSection
GlobalAlloc
WritePrivateProfileSectionA
GlobalFree
GlobalUnlock
GlobalLock
lstrcpyA
inet_addr
inet_ntoa
PathFileExistsA
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IABV12@@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??_F?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
InternetCloseHandle
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetDC
ReleaseDC
GetDIBits
CreateCompatibleBitmap
SetDIBits
GetObjectA
GetEntityCount
GetEntityInfo
ProduceEntity
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ