DZEndSelfEx
DZSelfEx
DZStartSelfEx
MainWndProc
RemoveDoubleQuotes
StatusDlgProc
Static task
static1
Behavioral task
behavioral1
Sample
3b797617beaa5235b8072aa61135ec60_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
3b797617beaa5235b8072aa61135ec60_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Target
3b797617beaa5235b8072aa61135ec60_NeikiAnalytics.exe
Size
2.7MB
MD5
3b797617beaa5235b8072aa61135ec60
SHA1
4140377a3e9171e7bb00a3f00e4aa5fb012f1fc0
SHA256
32d472dc0e7995808e756b30eed90e82f0f12f95e529eeab40b69558e4d236c9
SHA512
ea0c8eebb0cb8cbb1bb8e2007e5e583986b81d8d50dfa27079073149f9aaf3845bbb4f58a082be2b676388049c9c4f4c7cc85268a661957419f07b6b5af95e70
SSDEEP
49152:9nvnjz5FTr7wEMP2mQz0qpWTSRkIAo5h4TLbBaoJyL6w6PFObS5CsEXDKN3qL:rF7Y2iSFAM4LZw6423EXONaL
Checks for missing Authenticode signature.
Processes:
resource |
---|
3b797617beaa5235b8072aa61135ec60_NeikiAnalytics.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
lstrcmpiA
FreeLibrary
GetModuleFileNameA
lstrcpyA
lstrlenA
lstrcatA
GetTempPathA
LoadLibraryA
CloseHandle
CreateDirectoryA
GetFileAttributesA
SetEnvironmentVariableA
WideCharToMultiByte
MultiByteToWideChar
GetLogicalDrives
GetFullPathNameA
GetTimeZoneInformation
GetDriveTypeA
ReadFile
SetCurrentDirectoryA
GetLastError
VirtualAlloc
VirtualFree
GetFileType
GetStdHandle
UnhandledExceptionFilter
RtlUnwind
ExitProcess
GetCPInfo
GetOEMCP
GetACP
GetVersion
GetCommandLineA
GetEnvironmentStrings
GlobalFree
GlobalLock
GlobalAlloc
GlobalUnlock
GetCurrentDirectoryA
SetFilePointer
DeleteFileA
CreateFileA
lstrcmpA
lstrcpynA
GlobalReAlloc
GetStartupInfoA
FileTimeToLocalFileTime
SetFileAttributesA
FileTimeToSystemTime
WriteFile
FindClose
FindFirstFileA
DosDateTimeToFileTime
SetFileTime
LocalFileTimeToFileTime
GetModuleHandleA
MessageBoxA
PostQuitMessage
DefWindowProcA
GetMessageA
IsDialogMessageA
DispatchMessageA
TranslateMessage
PostMessageA
LoadStringA
GetSystemMetrics
SetWindowTextA
SetDlgItemTextA
UpdateWindow
GetWindowRect
SetWindowPos
GetDC
OemToCharA
wsprintfA
SetCursor
GetActiveWindow
ReleaseDC
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSysColor
CreateDialogParamA
IsWindow
DeleteObject
CreateSolidBrush
GetStockObject
SetBkMode
SetBkColor
GetBkColor
DZEndSelfEx
DZSelfEx
DZStartSelfEx
MainWndProc
RemoveDoubleQuotes
StatusDlgProc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ