DllRegisterServer
DllUnregisterServer
MsiSIPCreateIndirectData
MsiSIPGetSignedDataMsg
MsiSIPIsMyTypeOfFile
MsiSIPPutSignedDataMsg
MsiSIPRemoveSignedDataMsg
MsiSIPVerifyIndirectData
Static task
static1
Behavioral task
behavioral1
Sample
76f9c701af6ebf91966bfccad9671ac0_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
76f9c701af6ebf91966bfccad9671ac0_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
76f9c701af6ebf91966bfccad9671ac0_NeikiAnalytics.exe
Size
125KB
MD5
76f9c701af6ebf91966bfccad9671ac0
SHA1
596c66887c09fe66def6a7cbb145cf32b9a9b015
SHA256
ebbec1d1a093e20d8faa0c5c15e5f5adb173b1d35b82c1a196287ce5a17a96e0
SHA512
548febb4bf4d3e5e47bdaaedbaa1e172f998faa97515e344c20a49012bb34f437a0d94fabaa4d16f652a31710e31cc89693deeb03cb8809b841a79e5c5f218ee
SSDEEP
1536:zpArtIUJHd3Hs3goHtXVPEvurJXkig+5om:zqrbsQoHpV0urzR
Checks for missing Authenticode signature.
resource |
---|
76f9c701af6ebf91966bfccad9671ac0_NeikiAnalytics.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CryptSIPAddProvider
CryptSIPRemoveProvider
DisableThreadLibraryCalls
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
IsBadStringPtrW
RaiseException
_vsnprintf
StgOpenStorage
__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
memcmp
memmove
strchr
strcmp
strcspn
strlen
DllRegisterServer
DllUnregisterServer
MsiSIPCreateIndirectData
MsiSIPGetSignedDataMsg
MsiSIPIsMyTypeOfFile
MsiSIPPutSignedDataMsg
MsiSIPRemoveSignedDataMsg
MsiSIPVerifyIndirectData
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ