RegisterNULLImage
UnregisterNULLImage
Static task
static1
Behavioral task
behavioral1
Sample
3b1b990d7cf9305ad6712c5ca3f2f3c0_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b1b990d7cf9305ad6712c5ca3f2f3c0_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
Target
3b1b990d7cf9305ad6712c5ca3f2f3c0_NeikiAnalytics
Size
9KB
MD5
3b1b990d7cf9305ad6712c5ca3f2f3c0
SHA1
1d9264654cc338f37a86d12f2e49d0ab6f5695a3
SHA256
c11ae5ff2bf0e3344cb1d5d8c1cf7ecab4f3fe515f52ae4d7febc2470d91f854
SHA512
69148bc39dd661ea602b81109c5feb2a3555493e641e99d5c36847b3b6a08918b30b8320b6ed128d102fcd8d87a6596b1c4f56f8fa58fbb27a01584de35d1bac
SSDEEP
192:E3iHymYdmGKyZMbm+B4PkOv5/JFuVTfzq6N:E3H4KT+GPkOvX6D
Checks for missing Authenticode signature.
resource |
---|
3b1b990d7cf9305ad6712c5ca3f2f3c0_NeikiAnalytics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ConformPixelInfo
AcquireImage
SetImageExtent
SyncAuthenticPixels
QueueAuthenticPixels
LogMagickEvent
RegisterMagickInfo
UnregisterMagickInfo
AcquireMagickInfo
DestroyImageList
GetFirstImageInList
__std_type_info_destroy_list
_except_handler4_common
memset
_crt_atexit
_execute_onexit_table
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_initialize_narrow_environment
_register_onexit_function
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RegisterNULLImage
UnregisterNULLImage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ