DllCanUnloadNow
DllGetClassObject
Behavioral task
behavioral1
Sample
b9055c860110239003e1fdc917bff37927c2385daa61d528a3bb5c833e5172bb_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b9055c860110239003e1fdc917bff37927c2385daa61d528a3bb5c833e5172bb_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
b9055c860110239003e1fdc917bff37927c2385daa61d528a3bb5c833e5172bb_NeikiAnalytics.exe
Size
13KB
MD5
8ad4853ee314f4a8a252a6943572d700
SHA1
7e6dd68e674d6d32bfac2040bebd3612f7ea10d6
SHA256
b9055c860110239003e1fdc917bff37927c2385daa61d528a3bb5c833e5172bb
SHA512
213e7964ebb5a3cbfa6bb8608c564363c2bcf71d7274513b8ee4b5b72fdcfc637fdddca8595697869f3a790810a6b492ec9ced6ad70794dc08cc0a896c458058
SSDEEP
192:rIoRjtZzjpfmnPPy7Hxaiq6VqMl5qC52dpPBnHo21I61Oq70zsJ/WsyIWXtSZ:soTZZf6sRbqMx0/I6cqNWsyIWX
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b9055c860110239003e1fdc917bff37927c2385daa61d528a3bb5c833e5172bb_NeikiAnalytics.exe |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ