DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
163e8936b61beac778c30fa4f6988c97524a377e67a4ef2f286868a92d0729ca_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
163e8936b61beac778c30fa4f6988c97524a377e67a4ef2f286868a92d0729ca_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
163e8936b61beac778c30fa4f6988c97524a377e67a4ef2f286868a92d0729ca_NeikiAnalytics.exe
Size
80KB
MD5
4dc43f7a28f2f0d37af0743543159fa0
SHA1
ec5278725fa814869906933cd3d9eaad47649457
SHA256
163e8936b61beac778c30fa4f6988c97524a377e67a4ef2f286868a92d0729ca
SHA512
2d84a65fefb4240051ec6c322f54e926e1b066145d2b8d45b722dd5b49dc7fc9d40cde36c0f599a04316c12b1d049e77ea40f58f9cdadc9f781966a653a80789
SSDEEP
768:2LZkW+U7XGF3pTJefcxtX+NtffAW3uzu9TX7EdQuDIvDp0IbqmEgsi6vkVBnyQKF:qZkWlXGF3/mtf3j78uaTDkVQKiaJuD
Checks for missing Authenticode signature.
resource |
---|
163e8936b61beac778c30fa4f6988c97524a377e67a4ef2f286868a92d0729ca_NeikiAnalytics.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MethCallEngine
ord516
ord518
ord519
ord300
ord595
ord302
ord303
ord306
ord520
ord308
ord309
ord631
ord632
ord526
EVENT_SINK_AddRef
ord527
ord528
ord560
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord605
ord712
ord714
ProcCallEngine
ord537
ord681
ord685
ord101
ord102
ord103
ord104
ord105
ord616
ord617
ord618
ord619
ord581
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ