DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
493297e95042d0269c03b37ec4c62168aab9e5b469a56aae32d110eb1b9481d9_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
493297e95042d0269c03b37ec4c62168aab9e5b469a56aae32d110eb1b9481d9_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
493297e95042d0269c03b37ec4c62168aab9e5b469a56aae32d110eb1b9481d9_NeikiAnalytics.exe
Size
174KB
MD5
d4cc8f5f24a3f11b32e1d0fd85996120
SHA1
2921c9738b0d51e86961fcb87457976083f1fc21
SHA256
493297e95042d0269c03b37ec4c62168aab9e5b469a56aae32d110eb1b9481d9
SHA512
3007c6581876978b0c1620e5aa0ffe95f84c86d4202680f5788fdf0d80370c2475f089d009b3df980605db86d92c1c044b44ac9b352c2f1fd101ce19314ef1c6
SSDEEP
3072:7LQw+G40BzD1I8uwRgfWYZb3Mmz/kXQyhGe3YxVZICodhBwO:7L95jzJuwMWGAmwIuCodhKO
Checks for missing Authenticode signature.
resource |
---|
493297e95042d0269c03b37ec4c62168aab9e5b469a56aae32d110eb1b9481d9_NeikiAnalytics.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
FlushInstructionCache
GetACP
IsValidCodePage
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
Sleep
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStringTypeW
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
IsDBCSLeadByte
WideCharToMultiByte
MultiByteToWideChar
FindResourceA
lstrcmpiA
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LoadResource
LoadLibraryExA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
DisableThreadLibraryCalls
DecodePointer
GetCPInfo
EncodePointer
GetCurrentThreadId
GetCurrentProcess
RaiseException
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
GetOEMCP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapReAlloc
GetModuleFileNameW
WriteFile
GetStdHandle
HeapSize
GetModuleHandleExW
ExitProcess
GetCommandLineA
RtlUnwind
VirtualQuery
VirtualProtect
GetSystemInfo
OutputDebugStringW
IsDebuggerPresent
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetProcessHeap
HeapFree
HeapAlloc
CloseHandle
GetWindowLongA
DefWindowProcA
CallWindowProcA
UnregisterClassA
RegisterClassExA
GetClassInfoExA
CreateWindowExA
IsChild
DestroyWindow
ShowWindow
MoveWindow
SetWindowPos
IsWindowVisible
LoadCursorA
PtInRect
UnionRect
EndPaint
BeginPaint
BringWindowToTop
GetDC
GetKeyState
CharNextW
CharNextA
IsWindow
GetParent
SetWindowLongA
ReleaseDC
EqualRect
OffsetRect
IntersectRect
GetWindowRect
GetClientRect
SetWindowTextA
InvalidateRect
SetWindowRgn
UpdateWindow
IsWindowEnabled
EnableWindow
GetFocus
SetFocus
SetWindowExtEx
SetViewportOrgEx
LPtoDP
SetMapMode
SaveDC
RestoreDC
GetDeviceCaps
DeleteMetaFile
CreateMetaFileA
CreateDCA
CloseMetaFile
TextOutA
MoveToEx
GetTextMetricsA
SetTextColor
SetBkColor
SelectObject
Rectangle
LineTo
GetTextExtentPointA
GetTextColor
GetStockObject
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetWindowOrgEx
RegDeleteKeyA
RegSetValueExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CreateDataAdviseHolder
ReadClassStm
WriteClassStm
OleSaveToStream
CreateOleAdviseHolder
OleRegGetUserType
OleRegGetMiscStatus
OleRegEnumVerbs
UnRegisterTypeLi
OleCreatePropertyFrame
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VariantChangeType
SysAllocStringByteLen
SysStringByteLen
SysAllocString
VariantClear
VariantInit
SafeArrayGetElement
SysStringLen
SysFreeString
RegisterTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ