DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
d33ba30173594a6d58561a09435e9ed0_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
d33ba30173594a6d58561a09435e9ed0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
d33ba30173594a6d58561a09435e9ed0_NeikiAnalytics
Size
701KB
MD5
d33ba30173594a6d58561a09435e9ed0
SHA1
d323a2c3638a43e71092c95dccf9226f874f97f6
SHA256
3e1e056479d42f3b18862711cf2e41583d57ff62a9e4eef6d218e90bd06cff49
SHA512
e8ef360e7186c4bb7f5bf3f1b4c19d94ec00f91ee59d8ecf2e5ec3e8e122e27ff273af9358bf975fd771b8f809bde6d1207b0f98a7398e714f377c19c01a458a
SSDEEP
12288:srwebzQtH8iRIxQ0ExrYm0bJDyAvJecVZV0l8+H5BeJjZyHpl:sY8PxQ0RyIJBZH+Yw
Checks for missing Authenticode signature.
resource |
---|
d33ba30173594a6d58561a09435e9ed0_NeikiAnalytics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UuidToStringA
RpcStringFreeA
WideCharToMultiByte
GetLocaleInfoA
IsDBCSLeadByte
Sleep
GlobalLock
GlobalUnlock
lstrcpynA
lstrcpynW
SetEnvironmentVariableA
GetModuleFileNameA
MultiByteToWideChar
SetStdHandle
GetTimeZoneInformation
InterlockedExchange
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
FindResourceA
lstrcmpiA
SizeofResource
LoadResource
LoadLibraryExA
GetModuleHandleW
FlushFileBuffers
GetModuleHandleA
DisableThreadLibraryCalls
GetVersion
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
DecodePointer
EncodePointer
GetACP
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileW
GetStringTypeW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
WriteConsoleW
GetFileType
GetProcessHeap
HeapAlloc
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
CreateSemaphoreW
GetStartupInfoW
TlsFree
CreateThread
WaitForSingleObjectEx
OutputDebugStringA
OutputDebugStringW
CloseHandle
SetEvent
OpenEventW
GetCurrentProcessId
InitializeCriticalSectionEx
GetCurrentThread
GetSystemInfo
VirtualAlloc
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
IsDebuggerPresent
IsProcessorFeaturePresent
HeapValidate
VirtualProtect
VirtualQuery
GetModuleHandleExW
FindClose
FindFirstFileExA
FindNextFileA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
RtlUnwind
GetCommandLineA
GetCurrentThreadId
FatalAppExitA
LoadLibraryExW
lstrlenA
LoadLibraryW
IsValidCodePage
GetOEMCP
GetCPInfo
SetLastError
GetStdHandle
WriteFile
ExitProcess
AreFileApisANSI
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
SetConsoleCtrlHandler
SetForegroundWindow
wsprintfA
UnregisterClassA
CharNextA
LoadImageA
CharNextW
EnumWindows
GetSysColor
GetPropA
LoadBitmapA
SetMenuItemBitmaps
InsertMenuA
LoadStringA
SetPixel
SelectObject
GetPixel
GetCurrentObject
DeleteDC
CreateCompatibleDC
GetObjectA
RevertToSelf
OpenThreadToken
SetThreadToken
RegSetValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
FreeSid
AllocateAndInitializeSid
AddAccessAllowedAce
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ShellExecuteExA
DragQueryFileA
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
ReleaseStgMedium
CoCreateInstance
CoTaskMemFree
UnRegisterTypeLi
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysStringLen
SysFreeString
SysAllocString
PathFileExistsA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ