DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IASParmsQueryUserProperty
Behavioral task
behavioral1
Sample
64433295bdfae9dcd2ecb1986e45d460_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
64433295bdfae9dcd2ecb1986e45d460_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
64433295bdfae9dcd2ecb1986e45d460_NeikiAnalytics
Size
107KB
MD5
64433295bdfae9dcd2ecb1986e45d460
SHA1
8be52426feb1acd29e8b52b69dc17f17721b5da4
SHA256
f06d7b152bb1357b9c6e27012c4941fa02bda3308817d2504ec0fd07437a0d2e
SHA512
3a2af19590c9fa6fce8f9270725140af3c5926c921b0a77c69ad9923e8dbc0cec3cfd1bf24d867ff7a600efb260433fe67592d5d6bf7cf1c5f3ee1b405767626
SSDEEP
1536:ZziipXCK1DtImKlOfULDZHcBkEhI1qhFIyqGDpKkuY0b+zWSB8V/mSl/aVLczPNf:Zzly2IpOYhtynYJAlBczPQ0NgASz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
64433295bdfae9dcd2ecb1986e45d460_NeikiAnalytics |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IASParmsQueryUserProperty
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ