load
run
run
Static task
static1
Behavioral task
behavioral1
Sample
48eb6e3250376dbdd293e55922b5780809e3fbe7a7bc89798c5e03b053e4e048_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
48eb6e3250376dbdd293e55922b5780809e3fbe7a7bc89798c5e03b053e4e048_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
48eb6e3250376dbdd293e55922b5780809e3fbe7a7bc89798c5e03b053e4e048_NeikiAnalytics.exe
Size
409KB
MD5
37ec65b6eea5c553f17707d442eb5110
SHA1
d1f3c55bb2494f5842605f707d9cca323fe07e54
SHA256
48eb6e3250376dbdd293e55922b5780809e3fbe7a7bc89798c5e03b053e4e048
SHA512
09dffaeb6b3ace55004aea54370ec39a5b3b00eb9ecf8aac027731ad6e2fcc3cea9bb7c305bd859a22d13e2dddd0d534043c86581515f51781345c8be7bf934a
SSDEEP
6144:/plmX5ZIwhTQMmwfKEt5ljS5UnmVpFBwxmX+bI2:/SJZIetqUmVDBw0X1
Checks for missing Authenticode signature.
resource |
---|
48eb6e3250376dbdd293e55922b5780809e3fbe7a7bc89798c5e03b053e4e048_NeikiAnalytics.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
HeapCreate
EnterCriticalSection
DeleteCriticalSection
WaitForSingleObject
SetEvent
Sleep
CreateEventA
GetLastError
CloseHandle
GetCurrentThreadId
SwitchToThread
SetLastError
WideCharToMultiByte
lstrlenW
ResetEvent
LeaveCriticalSection
CancelIo
TryEnterCriticalSection
SetWaitableTimer
CreateWaitableTimerW
GetThreadContext
SetThreadContext
OpenProcess
GetExitCodeProcess
CreateProcessA
GetSystemDirectoryA
VirtualAllocEx
WriteProcessMemory
ResumeThread
CreateThread
CreateFileW
HeapDestroy
InitializeCriticalSectionAndSpinCount
HeapFree
HeapAlloc
VirtualAlloc
CreateEventW
VirtualFree
LCMapStringW
WriteConsoleW
SetStdHandle
GetStringTypeW
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryW
GetSystemTimeAsFileTime
GetCurrentProcessId
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
HeapReAlloc
HeapSize
GetProcessHeap
ExitThread
DecodePointer
EncodePointer
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapSetInformation
GetVersion
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FlsGetValue
FlsFree
FlsAlloc
RtlUnwindEx
SetHandleCount
GetFileType
PeekMessageW
TranslateMessage
MsgWaitForMultipleObjects
DispatchMessageW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyW
RegSetValueExW
WSACreateEvent
WSASetLastError
WSAResetEvent
WSAWaitForMultipleEvents
WSAIoctl
connect
WSAStartup
shutdown
htons
setsockopt
WSACleanup
recv
socket
closesocket
gethostbyname
send
WSAEnumNetworkEvents
WSAGetLastError
WSACloseEvent
select
WSAEventSelect
timeGetTime
load
run
run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ