__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
27e2ccc36a0dd2cc6923ec6e5509f17b238d06c6affda5fa571e64371a0f3bae_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
27e2ccc36a0dd2cc6923ec6e5509f17b238d06c6affda5fa571e64371a0f3bae_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Target
27e2ccc36a0dd2cc6923ec6e5509f17b238d06c6affda5fa571e64371a0f3bae_NeikiAnalytics
Size
403KB
MD5
f6c983b57be134937a194395e342d1d0
SHA1
9f68159563a88a6eb3d036f3fd5389893c9de9d0
SHA256
27e2ccc36a0dd2cc6923ec6e5509f17b238d06c6affda5fa571e64371a0f3bae
SHA512
093e342152ecdb7720ffe0dfd0c57614e249f87518b360d08c9ab5e0021cbd54b4177b4a3089315e8c3cb9208547fce7e65a53a359e07fd203f622b1577d5b12
SSDEEP
6144:bkw8M851gkh7K6npKjuteSjnnM1I8Ss/d:P8N7xnUjut9jnoI8Ss/d
Checks for missing Authenticode signature.
resource |
---|
27e2ccc36a0dd2cc6923ec6e5509f17b238d06c6affda5fa571e64371a0f3bae_NeikiAnalytics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
@$badd$qpcr6TCdato
@TCG@$bctr$qpvsls
@TCG@liberar_mem$qv
@TCG@set_GScontrol$qv
@TCagencia@$bctr$qs
@TCagencia@$bdtr$qv
@TCarrdat@$bctr$qcsssss
@TCarrdat@$bdtr$qv
@TCarrdat@$bsubs$qs
@TCarrdat@crea_previs_externo$qsss
@TCarrdat@getS$qlpvs
@TCarrdat@get_item_fto$qs
@TCarrdat@getinprevis$qr6TCdato
@TCarrdat@nftogetin$qr8TCarrdats6TCdato
@TCarrdat@nftogetin$qr8TCarrdatsd
@TCarrdat@nftogetin$qr8TCarrdatsl
@TCarrdat@nftogetin$qr8TCarrdatspc
@TCarrdat@nftogetin$qr8TCarrdatss
@TCarrdat@nftogetout$qr8TCarrdatsrd
@TCarrdat@nftogetout$qr8TCarrdatsrl
@TCarrdat@putS$qlpvs
@TCbase@calc_fecha_anterior$qls
@TCbase@calc_fecha_vencimiento$qlss
@TCbase@descomponer_fecha$qlpst2t2
@TCbase@difdias$qlls
@TCbase@existearch$qpcs
@TCbase@get_name_mes$qs
@TCbase@getdias_perconversion$qdss
@TCbase@getfecha$qpl
@TCbase@getfecha_dia_anterior$ql
@TCbase@getfrecuencia$qs
@TCbase@gethora$qpc
@TCbase@lrtrim$qpcs
@TCbase@suma_fecha_dias$qlls
@TCcondition@$bctr$qpvi
@TCcondition@$bdtr$qv
@TCcondition@add$qrlpcls
@TCcondition@add$qrspcss
@TCcta@$bctr$qr6TCdatop6TSctass
@TCcta@$bctr$qrdp6TSctass
@TCcta@$bdtr$qqrv
@TCcta@activar_control$qs
@TCcta@codcta$qv
@TCcta@codcta_padre$qv
@TCcta@crear_reg_cta$qs
@TCcta@cta_sin_subdivisiones$qs
@TCcta@existe$qv
@TCcta@get_Sctas$qv
@TCcta@get_reg_cta$qs
@TCcta@grabar_bfefmov_otro_ano$ql
@TCcta@nivelcta$qv
@TCcta@verificar_cta_sin_subdivisiones$qr6TSctasspc
@TCdato@$badd$qpc
@TCdato@$badd$qr6TCdato
@TCdato@$basg$qpxc
@TCdato@$basg$qr6TCdato
@TCdato@$bctr$qqr9TTipodatoui
@TCdato@$bctr$qqrrx6TCdato
@TCdato@$bctr$qqrrx8TSdefstr
@TCdato@$bctr$qqruipxc
@TCdato@$bctr$qqrv
@TCdato@$bdtr$qqrv
@TCdato@$brplu$qpc
@TCdato@$brplu$qr6TCdato
@TCdato@$bsubs$qui
@TCdato@create$q9TTipodatoui
@TCdato@create$quipxc
@TCdato@delformato$qv
@TCdato@destroy$qp6TCdato
@TCdato@fillchar$qsss
@TCdato@fto_a_num$qv
@TCdato@getin$qc
@TCdato@getin$qd
@TCdato@getin$ql
@TCdato@getin$qpxc
@TCdato@getin$qs
@TCdato@getnamedefcod$qlss
@TCdato@inscad$qr6TCdatoui
@TCdato@jsprintf$qpce
@TCdato@lrtrim$qr6TCdatos
@TCdato@putformatoinx$qv
@TCdato@readr$ql
@TCdato@writer$ql
@TCfile@GAnfile
@TCfile@GAsize
@TCfile@GNSFLNINDEX
@TCfile@GSin
@TCfile@Ghand_base
@TCfile@act_agencia_principal$qo
@TCfile@activarinx$qs
@TCfile@agencias_habilitadas$qv
@TCfile@buscarinx$qspcrlt3
@TCfile@cambiar_agencia_activa$qi
@TCfile@cargar_ruta$qpct19TTipoPathl
@TCfile@ccntonreg$qsl
@TCfile@closej$qsss
@TCfile@copyfromfile$qpcs9TTipoPath
@TCfile@creafile$qssso
@TCfile@existearch$qpc9TTipoPath
@TCfile@file_es_lock$qs
@TCfile@get_agencia_activa$qv
@TCfile@get_client_object$qv
@TCfile@get_namefile_cliente$qpcsd
@TCfile@get_namefile_unico$qpcss
@TCfile@getccn$qslo
@TCfile@getnamefile$qrx8TSnomfilspcs
@TCfile@getposcampo$qr8TSdefstrsssss
@TCfile@inic_file_warning$qso
@TCfile@init_module$qv
@TCfile@insertarinx$qspcls
@TCfile@lockr$qslls
@TCfile@mreadr$qssslpvl
@TCfile@mwriter$qssslpvl
@TCfile@nextccn$qs
@TCfile@nreg_valido$qslss
@TCfile@nregmax$qsl
@TCfile@openj$qsss
@TCfile@printerror$qpce
@TCfile@printwarning$qpce
@TCfile@readr$qslpvlo
@TCfile@tipo_multiple$qv
@TCfile@unlockr$qs
@TCfile@unlockrone$qsl
@TCfile@writememo$qslpco
@TCfile@writer$qslpvlo
@TCfilext@$bctr$qiui
@TCfilext@$bctr$qpcuisss
@TCfilext@$bdtr$qv
@TCfilext@create$qpcuisss
@TCfilext@destroy$qp8TCfilext
@TCfilext@nregmax$qv
@TCfilext@readr$qlpvll
@TCfilext@writer$qlpvll
@TCfilextCSV@$bctr$qpcsssss
@TCfilextCSV@$bdtr$qv
@TCfilextCSV@get_registro$qrls
@TCget@defcodnov$qs
@TCget@es_tiponota$qs
@TCget@get_estado_mes$qss
@TCget@get_nlineas_max$qs
@TCget@get_nombre_cliente$qr6TCdator10TSclientess
@TCget@get_nsfl_clasesubaux$qqrss
@TCget@get_nsubcbte_libre$qsls
@TCget@get_saldo$qr8TScsaldolss
@TCget@get_subrel$qrx8TSsubauxr8TSrelcars
@TCget@get_tasa$qsddls
@TCget@getfecha_es_dia_habil$qls
@TCget@getname_nit_xccn$qpvslp6TCdatot4pls
@TCget@getname_xnit$qpvsr6TCdatot3plt5s
@TCget@getnsflmaest_subcbte$qs
@TCget@getnsflnindex_subcbte$qs
@TCget@gettipo_modulo$qss
@TCget@getultrec$qs
@TCget@nsflauxil$qs
@TCget@nsflauxm$qs
@TCget@nsfldircb$qs
@TCget@nsfldirnov$qs
@TCget@nsfldirsa$qs
@TCget@nsflmodulo$qs
@TCget@nsflmovaux$qs
@TCget@nsflmovi$qs
@TCget@nsflnovedad$qs
@TCget@nsflrec$qs
@TCget@nsflsaldo$qs
@TCget@tasa_equiv_frecuencia$qddds
@TCio@$bctr$qr8TCarrdato
@TCio@$bdtr$qv
@TCio@fskippag$qv
@TCio@get_CRdatos$qv
@TCio@reportes$qpco
@TCio@reportes$qv
@TCio@reportes_subtitulo$qpcui
@TCptAstr@create$qss
@TCptAstr@destroy$qp8TCptAstr
@TCptAstr@push$qpvls
@TCptString@$bdtr$qv
@TCrecordset@$bctr$qip11TCconditionpv
@TCrecordset@$bdtr$qv
@TCrecordset@get_nreg$qv
@TCrecordset@next$qv
@TCsbase@$bctr$qqrss
@TCsbase@$bdtr$qv
@TCsbase@act_entorno$qr8TCarrdatrlpp8TCptAstrs
@TCsbase@actualizar$qs
@TCsbase@borrar_reg$qr8TCarrdatl
@TCsbase@cerrar$qs
@TCsbase@configurar$qv
@TCsbase@eliminar$qr8TCarrdatls
@TCsbase@fctrlkey$qr8TCarrdatss
@TCsbase@fnsfl$qqrv
@TCsbase@fnstr$qqrv
@TCsbase@fopcionmenu$qs
@TCsbase@get_row$qr8TCarrdatl
@TCsbase@grabar$qr8TCarrdatls
@TCsbase@grabar_rec$qr8TCarrdat
@TCsbase@gramod$qr4TCiospc
@TCsbase@gramodindex$qqrl
@TCsbase@importar$qr8TCarrdatpc
@TCsbase@insert_reg$qr8TCarrdatl
@TCsbase@leer$qr8TCarrdatrlpp8TCptAstrs
@TCsbase@leerlista$qr8TCarrdatsssl
@TCsbase@m_ptCRdatos
@TCsbase@m_ptSdirman
@TCsbase@mover_reg$qll
@TCsbase@poligramod$qr8TCarrdatspcs
@TCsbase@postverificar$qr8TCarrdat
@TCsbase@preftout$qspc
@TCsbase@preftout$qsrd
@TCsbase@preftout$qsrl
@TCsbase@preftout$qsrs
@TCsbase@pregramod$qr8TCarrdats
@TCsbase@retirar$qr8TCarrdats
@TCsbase@sellar$qs
@TCsbase@set_name_proceso$qr6TCdato
@TCsbase@set_row$qr8TCarrdatl
@TCsbase@visitar$qpvls
@TCsbase@visnftogetin$qr8TCarrdatsl
@TCsmaestro@seleccionar_registros$qr4TCiopqr4TCiol$vl
@TCverifi@es_ult_mes$qss
@TCverifi@flag_flujo_efectivo$qd
@TCverifi@grabarultrec$qsl
@TCverifi@ubicarnsubaux$qssr8TSsubaux
@TCverifi@ubicarnsubauxppal$qssr8TSsubaux
@TCverifi@validafecha$ql
@TCverifi@verificar_nsubcbtes_int$qr8TSsubauxt1
@TCverifi@verificar_ruta$qpc
@TCverifi@verificar_subruta$qpc
@TCverpro@$bctr$qlpcp12TIControllero
@TCverpro@$bdtr$qv
@TCverpro@proceso$ql
@get_GSbase$qv
@get_TCG$qv
@get_TCinx$qv
_GCmaestro
___CPPdebugHook
@System@initialization$qqrv
@System@Finalization$qqrv
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@FindHInstance$qqrpv
@System@@LStrFromPChar$qqrr17System@AnsiStringpc
@System@@LStrAsg$qqrpvpxv
@System@@LStrClr$qqrpv
@System@@HandleFinally$qqrv
@System@IsMemoryManagerSet$qqrv
@System@SetMemoryManager$qqrrx23System@TMemoryManagerEx
@System@IsMultiThread
@System@IsConsole
@System@ExitProc
@System@CmdLine
@System@IsLibrary
@System@MainInstance
@Sysconst@initialization$qqrv
@Sysconst@Finalization$qqrv
@Types@initialization$qqrv
@Types@Finalization$qqrv
@Imagehlp@initialization$qqrv
@Imagehlp@Finalization$qqrv
@Sysutils@initialization$qqrv
@Sysutils@Finalization$qqrv
@Varutils@initialization$qqrv
@Varutils@Finalization$qqrv
@Variants@initialization$qqrv
@Variants@Finalization$qqrv
@Rtlconsts@initialization$qqrv
@Rtlconsts@Finalization$qqrv
@Typinfo@initialization$qqrv
@Typinfo@Finalization$qqrv
@Typinfo@DotSep
@Typinfo@BooleanIdents
ord2
FreeLibrary
GetCommandLineA
GetModuleHandleA
GetProcAddress
GetProcessHeap
HeapAlloc
HeapFree
@$bdele$qpv
@$bdla$qpv
@$bnwa$qui
@_CatchCleanup$qv
@_InitTermAndUnexPtrs$qv
@_ReThrowException$quipuc
__ErrorExit
___CRTL_MEM_GetBorMemPtrs
___CRTL_MEM_UseBorMM
___CRTL_TLS_Alloc
___CRTL_TLS_ExitThread
___CRTL_TLS_Free
___CRTL_TLS_GetValue
___CRTL_TLS_InitThread
___CRTL_TLS_SetValue
____ExceptionHandler
___errno
___raiseDebuggerException
___terminatePTR
__argc
__argv
__argv_default_expand
__exitargv
__ftol
__handle_exitargv
__handle_setargv
__handle_wexitargv
__handle_wsetargv
__ltoupper
__setargv
__startup
__wargv_default_expand
_abort
_atof
_atol
_ceil
_fclose
_fflush
_floor
_fopen
_fread
_fseek
_log10
_ltoa
_memcpy
_memmove
_memset
_pow
_sprintf
_strcat
_strlen
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ