ActivateDrvWork
BeginDriverWork
EndDriverWork
GetActivateDrvWorkState
GetDataFrameCount
GetDllVersion
GetDriverBaseInfo
GetDriverStatusInfo
GetMarketInfo
GetNewDriverStatusInfo
GetOneDataFrame
IsDriverWorking
SuspendDrvWork
Static task
static1
Behavioral task
behavioral1
Sample
04ffbe3888f10fafe87a6fc8b278bf7704f2c542e219b7566b9393c4ea12d60d_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
04ffbe3888f10fafe87a6fc8b278bf7704f2c542e219b7566b9393c4ea12d60d_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
04ffbe3888f10fafe87a6fc8b278bf7704f2c542e219b7566b9393c4ea12d60d_NeikiAnalytics.exe
Size
860KB
MD5
05ee8764b43daa590ed4bf797d3e4e80
SHA1
cd03c20dba7afe48174b0ad059a86fd25459a44b
SHA256
04ffbe3888f10fafe87a6fc8b278bf7704f2c542e219b7566b9393c4ea12d60d
SHA512
9ec3bb0f477bce397406ff43d367c77c540e97e047a9a95bcf3e00bea0a420762f825c1b64cf7885d4da5af8863faffc168a28c30a6a5f7942aab29826403b6c
SSDEEP
12288:Rj3Azxo1VysDd8WjCYvl4WOLwEpk27uuagio:Nko1VyLWjCY9yLpH7uuagio
Checks for missing Authenticode signature.
resource |
---|
04ffbe3888f10fafe87a6fc8b278bf7704f2c542e219b7566b9393c4ea12d60d_NeikiAnalytics.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCurrentThreadId
GetCurrentProcessId
GetDriveTypeA
GetFullPathNameA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
GetTickCount
QueryPerformanceFrequency
QueryPerformanceCounter
LocalFree
FormatMessageA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
WaitForSingleObject
CloseHandle
TerminateThread
CreateEventA
SetEvent
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
GetVersionExA
GlobalMemoryStatus
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcess
GetModuleHandleA
CreateFileA
SetFilePointer
ReadFile
WriteFile
FlushFileBuffers
SetEndOfFile
FileTimeToSystemTime
FileTimeToLocalFileTime
DeleteFileA
GetCurrentDirectoryA
FindFirstFileA
FindClose
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
CreateThread
TlsSetValue
TlsGetValue
ExitThread
RaiseException
GetFileAttributesA
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
TlsAlloc
TlsFree
SetLastError
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
MultiByteToWideChar
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetLastError
connect
select
socket
gethostbyname
inet_ntoa
htons
inet_addr
setsockopt
closesocket
send
__WSAFDIsSet
recv
Netbios
RegisterEventSourceA
ReportEventA
DeregisterEventSource
GetDesktopWindow
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
ActivateDrvWork
BeginDriverWork
EndDriverWork
GetActivateDrvWorkState
GetDataFrameCount
GetDllVersion
GetDriverBaseInfo
GetDriverStatusInfo
GetMarketInfo
GetNewDriverStatusInfo
GetOneDataFrame
IsDriverWorking
SuspendDrvWork
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ