__GetExceptDLLinfo
___CPPdebugHook
Static task
static1
Behavioral task
behavioral1
Sample
72b5ee36f3ad3594d1e33c94c85f84aa49f4ceb3bcc1efcd1670499a110cce35_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
72b5ee36f3ad3594d1e33c94c85f84aa49f4ceb3bcc1efcd1670499a110cce35_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
Target
72b5ee36f3ad3594d1e33c94c85f84aa49f4ceb3bcc1efcd1670499a110cce35_NeikiAnalytics.exe
Size
79KB
MD5
5ed83164a955c25d3dda8766ef56ef10
SHA1
1717d336ee304883a667f1056263fb7af17bdaa3
SHA256
72b5ee36f3ad3594d1e33c94c85f84aa49f4ceb3bcc1efcd1670499a110cce35
SHA512
cc1c8daff852bb78f76c44bc514b4a60bca9a27ad7b6bfaa5306fe5acfdd348ac2d763717a9fc9d3e77a6a736dfa59f3fcbe753b649e7e956284a3f6516bbdc2
SSDEEP
1536:zvmMrCRpMyzLRMeNxOQA8AkqUhMb2nuy5wgIP0CSJ+5yM9B8GMGlZ5G:zvUhhAGdqU7uy5w9WMyM9N5G
Checks for missing Authenticode signature.
resource |
---|
72b5ee36f3ad3594d1e33c94c85f84aa49f4ceb3bcc1efcd1670499a110cce35_NeikiAnalytics.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetExitCodeProcess
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetTickCount
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LCMapStringA
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
EnumThreadWindows
MessageBoxA
wsprintfA
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ