LbRpCytALL
RPAuKY
cdxXFJEaMaL
dyTNEgEb
jdc
Static task
static1
Behavioral task
behavioral1
Sample
b9792a722499b9739faeaadc69f68c10_NeikiAnalytics.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b9792a722499b9739faeaadc69f68c10_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
b9792a722499b9739faeaadc69f68c10_NeikiAnalytics
Size
3.5MB
MD5
b9792a722499b9739faeaadc69f68c10
SHA1
46abe3c560f596368b0cc9e79c3e74a26060de8d
SHA256
63749ea861dd008e5742c31d6aa6e887d0e8f3301c08da72faa8902001434c2b
SHA512
3e1ce78b90d7b89a9989ba072007f40318837c9acd7644f30f36bc24be16a6e1afabac916057214e2503057032b7f348e6fe66db76bb2738ac4cce120b673059
SSDEEP
24576:tM189MjxUjatf27x+ANn8uz7ajpGzSPlmoz3jdOZCxzwB+E/CFVhJ2/V45q025uq:i189UxUjatf293z7a7zN53cL52
Checks for missing Authenticode signature.
resource |
---|
b9792a722499b9739faeaadc69f68c10_NeikiAnalytics |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CloseHandle
GetProcAddress
CreateProcessA
LoadLibraryA
GetOEMCP
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
WideCharToMultiByte
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
GetCurrentProcess
TerminateProcess
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
GetLastError
FreeLibrary
LoadLibraryExW
ReadFile
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
GetFileSizeEx
FlushFileBuffers
WriteFile
GetConsoleCP
HeapFree
HeapAlloc
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
DeleteFileW
HeapReAlloc
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetFileAttributesExW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
CreateFileW
HeapSize
SetEndOfFile
WriteConsoleW
RtlUnwind
LbRpCytALL
RPAuKY
cdxXFJEaMaL
dyTNEgEb
jdc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ