Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
41b069110c9f8979d923920e9dc9bb60_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
41b069110c9f8979d923920e9dc9bb60_NEIKI.exe
Resource
win10v2004-20240419-en
Target
41b069110c9f8979d923920e9dc9bb60_NEIKI
Size
106KB
MD5
41b069110c9f8979d923920e9dc9bb60
SHA1
a8c5fe7702a32329804b6f9b99a40148436702dd
SHA256
4344863927d6a2e0824de6755f65bdcba0545abf8de7f818eda1b5cbf5537dfd
SHA512
ae6c1dd92180ab2b99f455020dd0899abd8a662cdd464fceae52f338e140848faff1efc5d6070782692fbdac7f28bf6e6a7f50842f82d3822dc9588eb569ad43
SSDEEP
1536:VseoynFrIp1Q4tRouSVxFR5CvT0xRv3OIDiJD3xlfyswzXaEDRzLt:HIRHoueR5KIx9+IeJDBlf4awLt
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
d:\Projects\Thunders_kankanlite\DownloadService\DownloadServer\Release\ThunderServiceLite.pdb
PathAddBackslashA
PathRemoveExtensionA
PathFindExtensionA
PathAppendA
PathFileExistsA
PathFindExtensionW
PathIsDirectoryA
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW
ExecutionLiveUpdateFile
ExitProcess
CloseHandle
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
CreateDirectoryA
GetModuleFileNameA
GetLocalTime
GetProcAddress
LoadLibraryA
GetModuleFileNameW
SetUnhandledExceptionFilter
LoadLibraryW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetTickCount
FreeLibrary
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
GetLastError
WideCharToMultiByte
lstrlenW
GetCurrentDirectoryA
GetStartupInfoA
SetCurrentDirectoryA
lstrcmpiA
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrcpynA
lstrcpyA
lstrcatA
DeleteFileA
GetTempPathA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
CreateEventA
CreateMutexA
GetCommandLineA
Process32Next
Module32Next
Module32First
Process32First
CreateToolhelp32Snapshot
LocalFree
LocalAlloc
SetFileAttributesA
GetFileAttributesA
QueryPerformanceCounter
GetSystemTimeAsFileTime
OutputDebugStringA
DispatchMessageA
CharNextA
GetMessageA
SetTimer
KillTimer
CreateDialogParamA
DestroyWindow
SendMessageTimeoutA
IsWindow
PostMessageA
MessageBoxW
OpenProcessToken
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
CoRevokeClassObject
CoTaskMemRealloc
CoRegisterClassObject
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoUninitialize
CoInitialize
CoTaskMemFree
VariantInit
VarBstrCmp
VarBstrCat
SafeArrayDestroy
SysStringByteLen
SysAllocStringByteLen
SafeArrayGetUBound
SysStringLen
VariantClear
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?_Nomemory@std@@YAXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
_wcsnicmp
_except_handler3
free
??3@YAXPAX@Z
strlen
_CxxThrowException
malloc
_snprintf
memcmp
_resetstkoflw
_purecall
wcsncpy
realloc
fclose
fprintf
fopen
_putenv
_mbsicmp
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
wcslen
wcscpy
isalnum
memmove
_atoi64
_ftime64
vfprintf
wcscmp
_callnewh
__security_error_handler
__dllonexit
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_wcsicmp
strcat
sprintf
??_V@YAXPAX@Z
memcpy
swprintf
__CxxFrameHandler
memset
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE