Hook
Unhook
initialise
Behavioral task
behavioral1
Sample
695f563de9244a54df245e87b54da51cdf7aa7e630d9199f24e78b287f7aefcf_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
695f563de9244a54df245e87b54da51cdf7aa7e630d9199f24e78b287f7aefcf_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
695f563de9244a54df245e87b54da51cdf7aa7e630d9199f24e78b287f7aefcf_NeikiAnalytics.exe
Size
3.8MB
MD5
30eb0c6818ce1705552ae77edc451a10
SHA1
d910a607a9d10421d2f82d4b0905e65b978e1a53
SHA256
695f563de9244a54df245e87b54da51cdf7aa7e630d9199f24e78b287f7aefcf
SHA512
c7c2033025dee527c665c2e54ed59e3afcb63b51ec5a2272d3c83fa5e2a6873933905afc20cce11ca938b05227f23dac45cb02deeaa7f4b7d883d5026409729d
SSDEEP
98304:0sBgvj2xbLimwfMlYkVn5G55RdW9nRIGS5EE9brbr3i+wRAyQ:0Fjaumwf25G55Rd8RFS5EE9jr3i+web
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
resource |
---|
695f563de9244a54df245e87b54da51cdf7aa7e630d9199f24e78b287f7aefcf_NeikiAnalytics.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Hook
Unhook
initialise
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ