DllRegisterServer
DllUnregisterServer
SuaGetDLLManagerSink
Static task
static1
Behavioral task
behavioral1
Sample
754617e32818b121816e0748564c0880_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
754617e32818b121816e0748564c0880_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
754617e32818b121816e0748564c0880_NeikiAnalytics.exe
Size
72KB
MD5
754617e32818b121816e0748564c0880
SHA1
d3befcccb6400dbe5ecc926eff1fd2cb919cf76c
SHA256
ef50eb46c465b1388da8dec86886909e8422f22f5c21fe48f23db88c770d6d24
SHA512
152cb50bb5b83b9cdf20fe0ba5e6497c0275f67bf455497038079f076b157d2611390eb572df2f50fcca39e6c1ffa1844e0f76e214d5fbb17f681a17057de34d
SSDEEP
1536:0wGxfHQ65XunUqAGbwrTEXa6Mim3aXBnS:0wGxjq4BBimYFS
Checks for missing Authenticode signature.
resource |
---|
754617e32818b121816e0748564c0880_NeikiAnalytics.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLocaleInfoA
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
FreeLibrary
GetACP
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
GetLastError
SetLastError
CompareStringA
InterlockedExchange
GetSystemInfo
VirtualProtect
LCMapStringA
GetStringTypeA
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
ExitProcess
HeapFree
GetCurrentThreadId
GetCommandLineA
HeapReAlloc
HeapAlloc
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
UnhandledExceptionFilter
WriteFile
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetOEMCP
RegCloseKey
CoCreateInstance
CoInitialize
CoUninitialize
VariantInit
DispCallFunc
VariantClear
SysFreeString
DllRegisterServer
DllUnregisterServer
SuaGetDLLManagerSink
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ