Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
Static task
static1
Behavioral task
behavioral1
Sample
4e73bb040a8b5ab441023ee7d3e29460_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4e73bb040a8b5ab441023ee7d3e29460_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
4e73bb040a8b5ab441023ee7d3e29460_NeikiAnalytics.exe
Size
22KB
MD5
4e73bb040a8b5ab441023ee7d3e29460
SHA1
eb3bcb158f9a378e5dacfe0027d58479eb386183
SHA256
f84bba718eda2259138aadcf080d3943847390e307b9804d3b54fb8c4be5d2ed
SHA512
6e4c3a751cce1128e2dbeda09a816c4c9e36926b3469f8c231a0623fb001a2ba5e85bfefd60eaf8a26ee80e8c68dbe64e697d710eca5db36f458f70b8ecb5e76
SSDEEP
384:+Vjgya6H7GaDd0JUGbsYlxh5tawKrwwXEgZ28uo3ydLyU93OO3kkP:+L7G9HhHawKrDB2No3O93r
Checks for missing Authenticode signature.
resource |
---|
4e73bb040a8b5ab441023ee7d3e29460_NeikiAnalytics.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalLock
GlobalAlloc
GetTempPathA
Process32Next
Process32First
CreateToolhelp32Snapshot
WideCharToMultiByte
CreateThread
FreeLibrary
GetProcAddress
WriteFile
GetSystemDirectoryA
GetCurrentProcessId
SetFilePointer
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetLastError
CreateMutexA
GlobalUnlock
GlobalFree
MultiByteToWideChar
DeleteFileA
lstrcpynA
CreateFileA
ReadFile
CloseHandle
GetTickCount
lstrlenA
lstrcmpiA
lstrcatA
lstrcpyA
lstrcmpA
Sleep
ExitProcess
VirtualProtect
LoadLibraryA
OutputDebugStringA
UnhookWindowsHookEx
CallNextHookEx
GetForegroundWindow
EnumWindows
GetSystemMetrics
GetWindowTextA
IsWindowVisible
IsIconic
GetActiveWindow
PostThreadMessageA
SetForegroundWindow
ReleaseDC
GetDC
IsRectEmpty
GetWindowThreadProcessId
FindWindowExA
FindWindowA
PrintWindow
GetWindowInfo
ShowWindow
SetWindowsHookExA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
CreateDCA
GetDeviceCaps
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
BitBlt
InternetConnectA
HttpSendRequestA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
HttpEndRequestA
InternetWriteFile
HttpSendRequestExA
HttpAddRequestHeadersA
InternetQueryDataAvailable
HttpOpenRequestA
GdipDisposeImage
GdipFree
GdiplusStartup
GdipAlloc
GdipLoadImageFromFile
GdipSaveImageToFile
GdiplusShutdown
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCloneImage
strstr
free
malloc
atoi
??3@YAXPAX@Z
wcscmp
??2@YAPAXI@Z
memmove
Hookoff
Hookon
InstallService
KsCreateAllocator
KsCreateClock
KsCreatePin
KsCreateTopologyNode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ