DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
34420d24173d268185981cddd00495e0_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
34420d24173d268185981cddd00495e0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
34420d24173d268185981cddd00495e0_NeikiAnalytics.exe
Size
188KB
MD5
34420d24173d268185981cddd00495e0
SHA1
b6e13d801fa0f40bf094a4a496b0126a414d0227
SHA256
a4676bd22e285fbe4db02b596542e279736f16c16988920914eeeabeb982e16b
SHA512
e60bd9f7e0aab378f78bd857ff53c1ef3ae2802300c30361c7e298829c2311482a3ab5fb3fa481e0cd764bc1fc36928f3a4b2e05c03a31a618c9efc6dce97994
SSDEEP
3072:9o7og6aa8mCJIIjx53kvG1ZcCzpxannoph4TUW0lS:iBJJIIjfOCF8qS
Checks for missing Authenticode signature.
resource |
---|
34420d24173d268185981cddd00495e0_NeikiAnalytics.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
WindowsDeleteString
WindowsDuplicateString
WindowsGetStringRawBuffer
CloseThreadpoolWork
CreateThreadpoolWork
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
InitializeCriticalSection
IsBadStringPtrW
LeaveCriticalSection
SubmitThreadpoolWork
_vsnprintf
__acrt_iob_func
__stdio_common_vsprintf
_strdup
calloc
free
fwrite
getenv
memcmp
memmove
realloc
strchr
strcmp
strcpy
strcspn
strlen
wcscmp
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ