DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
7c4b0a6166dc7eea86745723d86cda70_NeikiAnalytics.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7c4b0a6166dc7eea86745723d86cda70_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
7c4b0a6166dc7eea86745723d86cda70_NeikiAnalytics.exe
Size
730KB
MD5
7c4b0a6166dc7eea86745723d86cda70
SHA1
c249a67c22fe2184a49f8c877a0aa0b11f2b0a07
SHA256
ece64eb678d1bba212fc181bd5bad11987a51585a58ac718bf8d77985a122203
SHA512
5cd6780046f3627284420a79e2fa92eb081b75eca27ec194d478acb869e6fa12dee069a6cbb4d26aefdcf04d98f94065737d59bc0ef6dccf35f65faf64424adf
SSDEEP
6144:albmdFJ72/RHYYLe2fRpqny8E7c7f9gQP+YAQM2+xr35sBGNbW:a8FS7qny8oc7g5b2+xrJ8GNbW
Checks for missing Authenticode signature.
resource |
---|
7c4b0a6166dc7eea86745723d86cda70_NeikiAnalytics.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
DisableThreadLibraryCalls
EnumResourceNamesW
FindResourceW
GetEnvironmentVariableW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetTickCount
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrW
LoadLibraryW
LoadResource
MultiByteToWideChar
SizeofResource
_vsnprintf
SQLDisconnect
SQLFreeStmt
SQLNumResultCols
SQLRowCount
SQLAllocHandle
SQLFreeHandle
SQLGetDiagRec
SQLSetEnvAttr
SQLColAttributesW
SQLDescribeColW
SQLExecDirectW
SQLPrepareW
SQLDriverConnectW
CoTaskMemAlloc
CoTaskMemFree
SysStringLen
VariantInit
VariantCopy
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_strdup
_wcsdup
_wcsicmp
_wcsnicmp
bsearch
free
fwrite
getenv
malloc
memcmp
memmove
memset
strchr
strcmp
strcspn
strlen
wcslen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ