LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
Behavioral task
behavioral1
Sample
bf2474dac8eca3d31301196b4e7cc740_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf2474dac8eca3d31301196b4e7cc740_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
bf2474dac8eca3d31301196b4e7cc740_NeikiAnalytics
Size
88KB
MD5
bf2474dac8eca3d31301196b4e7cc740
SHA1
6b8a8e6a7911ea2efcc991d6f9319878c3254633
SHA256
98b44a6314e185a369a4f893744da8983fe0fc073a543933f25dc1922be08088
SHA512
40b885808451fdb7e258a07bf03ad75bb53a2ec1a439194b3a4dc8d190b909cf266e76a46245458d97c48fda21de1a5c768067009e3feadf2b6b003bc12605dc
SSDEEP
1536:Njz7ZeDgOA+iq64CYNvFGHXe85HgeDYq2kWb0UY2jCV5Ylb0F:pz7vOzIYNvIHO8Jt8b0UWH7F
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
bf2474dac8eca3d31301196b4e7cc740_NeikiAnalytics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualProtect
GetModuleHandleA
GetProcAddress
VirtualProtect
LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ