DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
Static task
static1
Behavioral task
behavioral1
Sample
0cc2da3af6cd78cad86e38b9fbc01970_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0cc2da3af6cd78cad86e38b9fbc01970_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
0cc2da3af6cd78cad86e38b9fbc01970_NeikiAnalytics.exe
Size
268KB
MD5
0cc2da3af6cd78cad86e38b9fbc01970
SHA1
0423531c9032fe07f6ea252d3b7a76c47585b5fb
SHA256
59ce833da5979df99eaa7b24ce863f584c982473eaa6ff69a6c922f984c6ad23
SHA512
9962edf651cdffe72bf791e7b157847206be9849168dfa15f5ad8413dbc4403bd0a2eefe863ee1703bfc1accf18c34815a6d7de6bc9b62221aa62638168bbbee
SSDEEP
3072:tUVw6s7QkHs1jFLgqRzi414qcSeDBbiG3ufag3DYcC+3OhvFcKFHh0Oom/:tgPkM1xgqRG+igz5BA
Checks for missing Authenticode signature.
resource |
---|
0cc2da3af6cd78cad86e38b9fbc01970_NeikiAnalytics.exe |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PropVariantClear
PropVariantCopy
WindowsCreateString
WindowsGetStringRawBuffer
DirectInput8Create
HidD_FreePreparsedData
HidD_GetFeature
HidD_GetHidGuid
HidD_GetPreparsedData
HidD_SetOutputReport
HidP_GetCaps
HidP_GetLinkCollectionNodes
HidP_GetSpecificValueCaps
HidP_GetUsageValue
HidP_InitializeReportForID
HidP_SetUsageValue
CloseHandle
CloseThreadpoolWork
CreateEventA
CreateFileW
CreateThread
CreateThreadpoolWork
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FreeLibraryAndExitThread
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
GetTickCount
GetTickCount64
HeapAlloc
HeapReAlloc
InitOnceExecuteOnce
InitializeCriticalSection
IsBadStringPtrW
LeaveCriticalSection
SetEvent
SubmitThreadpoolWork
WaitForSingleObject
_vsnprintf
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
__acrt_iob_func
__stdio_common_vsprintf
_strdup
_wcsicmp
_wcsnicmp
atan
calloc
free
fwrite
getenv
malloc
memcmp
memmove
realloc
round
strchr
strcmp
strcspn
strlen
wcschr
wcscmp
wcscpy
CreateWindowExW
DefWindowProcW
DestroyWindow
DispatchMessageW
GetDesktopWindow
MsgWaitForMultipleObjectsEx
PeekMessageW
RegisterClassExW
RegisterDeviceNotificationW
TranslateMessage
UnregisterClassW
UnregisterDeviceNotification
DllCanUnloadNow
DllGetActivationFactory
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ