DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Static task
static1
Behavioral task
behavioral1
Sample
8a85819c79546d55b022d77237fcab225623788eff65a68988d6a391c51e28f6_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8a85819c79546d55b022d77237fcab225623788eff65a68988d6a391c51e28f6_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
8a85819c79546d55b022d77237fcab225623788eff65a68988d6a391c51e28f6_NeikiAnalytics.exe
Size
140KB
MD5
e5321c3996c77aa94bb41a17f9c49f30
SHA1
3e537938075ccf0bbd94d1e10f100522c5adf9e5
SHA256
8a85819c79546d55b022d77237fcab225623788eff65a68988d6a391c51e28f6
SHA512
e66856ea37d226e4af61c1fcf381301c458e9962743b02a8ff62e841cb61b777d4280070287d5deaa4d2f6f7d3589087710b052fb05585c337f2198338c7d8f8
SSDEEP
192:gzZrmiSPGuH8+HuwdNyZDkowiuy1rQXuH8IJP0pMLME35AXgWjf5Cmnyz:gVraPGuHwuDiuyBxIhEMggf5CKy
Checks for missing Authenticode signature.
resource |
---|
8a85819c79546d55b022d77237fcab225623788eff65a68988d6a391c51e28f6_NeikiAnalytics.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
Sleep
GetSystemDefaultLangID
lstrcpynW
DisableThreadLibraryCalls
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
lstrlenA
lstrcpynA
lstrcatA
lstrcpyA
EnterCriticalSection
InterlockedDecrement
lstrlenW
DebugBreak
FindClose
CreateFileA
GetFileSize
ReadFile
CloseHandle
DeleteCriticalSection
FindFirstFileA
lstrcmpiA
FindNextFileA
GetLastError
lstrcmpA
GetFileAttributesA
LeaveCriticalSection
InterlockedIncrement
InitializeCriticalSection
HeapFree
SetCursor
InsertMenuA
GetCursor
LoadCursorA
LoadStringA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
DragQueryFileA
ShellExecuteA
ReleaseStgMedium
SysFreeString
LoadRegTypeLi
SysStringLen
StrCmpIW
ord23
ord16
ord15
ord21
ord18
ord57
ord32
ord58
ord30
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE