AddSparsePackage
CheckCpuFeatureAVX
CreateTaskFolder
QuietExec
RegisterPropertySchema
RemoveMUIProducts
RemoveSparsePackage
SetPropertySchemaProperties
SetRunModeRebootAtEndProperty
SetSmartFTPRestartProperty
UnregisterPropertySchema
Static task
static1
Behavioral task
behavioral1
Sample
c00474ed70a521653f87e3b35f5365f0_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c00474ed70a521653f87e3b35f5365f0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
c00474ed70a521653f87e3b35f5365f0_NeikiAnalytics
Size
16KB
MD5
c00474ed70a521653f87e3b35f5365f0
SHA1
6f404a07e90ccc154e6e65d57429b6e6789cc97f
SHA256
4efbad55ec5f2944cdd78c0c5678b6e4e97d3f3e9dea51944eca250eda9e3509
SHA512
47f3f06f292b4e1cd6e022b8a6ecff5f5ecbef693dfba7ebf2d2407af69f0c67c1c5a48dbccfd59d290d009f41af4d2ea7cb3df7866e2197abcb8d579c979117
SSDEEP
192:M++CpsZnwdbr2UL76NIWbpOg/h0gAKNTPhKLmIbXxoXkQwBSpd0PafKJat:oFHUL76NIW0g6gAyk6IFo0QRKJat
Checks for missing Authenticode signature.
resource |
---|
c00474ed70a521653f87e3b35f5365f0_NeikiAnalytics |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ord8
ord103
ord145
ord205
ord125
ord17
ord74
ord64
ord70
PSRegisterPropertySchema
PSUnregisterPropertySchema
abort
free
__stdio_common_vswprintf
CoTaskMemFree
GetRunningObjectTable
CreateItemMoniker
CoCreateInstance
CoTaskMemAlloc
StringFromGUID2
CoTaskMemRealloc
SetEvent
CreateEventW
GetLastError
SetLastError
CreateProcessW
GetPriorityClass
GetCurrentProcess
CloseHandle
IsProcessorFeaturePresent
GetExitCodeProcess
WaitForSingleObject
WaitForSingleObjectEx
RoInitialize
RoGetActivationFactory
RoUninitialize
WindowsCreateString
WindowsDeleteString
PathCchAppend
VariantClear
SysAllocString
VariantInit
SysFreeString
AddSparsePackage
CheckCpuFeatureAVX
CreateTaskFolder
QuietExec
RegisterPropertySchema
RemoveMUIProducts
RemoveSparsePackage
SetPropertySchemaProperties
SetRunModeRebootAtEndProperty
SetSmartFTPRestartProperty
UnregisterPropertySchema
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ