TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Behavioral task
behavioral1
Sample
588869f8e2b207859eca08e5449f0521cc633108205c9ce45682cf4e7ab200c7_NeikiAnalytics.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
588869f8e2b207859eca08e5449f0521cc633108205c9ce45682cf4e7ab200c7_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Target
588869f8e2b207859eca08e5449f0521cc633108205c9ce45682cf4e7ab200c7_NeikiAnalytics.exe
Size
1.7MB
MD5
6dcf90d32d5d993f84fcbfa77246ca10
SHA1
7dc439ff7602592535df7cb9b0b1fdddba9dda85
SHA256
588869f8e2b207859eca08e5449f0521cc633108205c9ce45682cf4e7ab200c7
SHA512
e406c9a083864a651833be59882f43c2695ad47e5b25d83cd83f6713df9eb17b098095151d3620f72dbf990724121f33466176e67a0e598aaf7f965b312a36f0
SSDEEP
24576:DxdfTVo8s77ueETE+0rpH/vJbH/vDzH/vngIvuWnX:DxoD6T/0rZ/xb/bj/PfV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
588869f8e2b207859eca08e5449f0521cc633108205c9ce45682cf4e7ab200c7_NeikiAnalytics.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE