Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2f13aa134d5b28946f1589f91188ca90_NEIKI.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2f13aa134d5b28946f1589f91188ca90_NEIKI.dll
Resource
win10v2004-20240419-en
Target
2f13aa134d5b28946f1589f91188ca90_NEIKI
Size
141KB
MD5
2f13aa134d5b28946f1589f91188ca90
SHA1
5dc5eeaa64cc7d25e5a58ef32e6dcd52262c1351
SHA256
f8a600313607828e7fee34877509975574c7cf7e097623cd9ff7e7666ee1b9d4
SHA512
6aae7996066dff3e01556e12db4bf7d20e3a95be25e519591bf81e99a3aedbf523f2314d76312d5d58e28063e4a2205b5ee96f4e7cf71e66ad06828d48cd5a96
SSDEEP
3072:7mzfDktK60oafE9x59v2lQBV+UdE+rECWp7hKiaZ:7mzfDkwYH9x5FBV+UdvrEFp7hKiaZ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\TeamCity_WorkSpace\Global\src\Release\MiFramework.pdb
ord6
ord4
ord7
SetFilePointer
SetEndOfFile
WriteFile
ReadFile
CreateDirectoryW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
GetLastError
LoadLibraryW
GetProcAddress
GetModuleHandleW
DecodePointer
LoadLibraryExW
FreeLibrary
FormatMessageW
GetVersionExW
GetNativeSystemInfo
SetFileAttributesW
Process32FirstW
Process32NextW
OpenProcess
TerminateProcess
GetStartupInfoW
CreatePipe
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
GetTickCount
PeekNamedPipe
Sleep
TerminateThread
GetExitCodeThread
SuspendThread
ResumeThread
EncodePointer
OutputDebugStringW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetFileTime
SetFileTime
CopyFileW
DeleteFileW
GetFileAttributesW
GetCurrentDirectoryW
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
CreateFileW
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
CreateToolhelp32Snapshot
MessageBoxW
GetActiveWindow
MessageBoxA
EnumFontFamiliesExW
RegEnumKeyExW
CheckTokenMembership
AllocateAndInitializeSid
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptReleaseContext
CryptAcquireContextW
FreeSid
SHGetSpecialFolderPathW
SHChangeNotify
SHFileOperationW
PropVariantClear
CoCreateInstance
??1C_FUNCTION_Helper@@QAE@XZ
??0C_FUNCTION_Helper@@QAE@PBD0@Z
?ToLPCWSTR@C_FUNCTION_Helper@@QAEPB_WXZ
TraceVW
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
_initterm_e
_initterm
__CxxFrameHandler3
_amsg_exit
__CppXcptFilter
_CxxThrowException
memset
_except_handler4_common
__clean_type_info_names_internal
_malloc_crt
memcpy
memmove
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
free
malloc
wcscpy_s
strcpy_s
_vsnwprintf
_vsnprintf
wcsrchr
realloc
??_V@YAXPAX@Z
wcstol
swprintf_s
wcschr
wcsstr
_wsplitpath_s
vswprintf_s
wcscat_s
wcsncpy_s
_wcsicmp
memmove_s
_beginthreadex
_wtoi
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
SHStrDupW
PathAppendW
SetupDiGetClassDevsW
CM_Get_DevNode_Registry_PropertyW
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
??0CMiConv@@QAE@XZ
??0CMiConvAuto@@QAE@PBD@Z
??0CMiConvAuto@@QAE@PB_W@Z
??0CMiCriticalSection@@QAE@XZ
??0CMiFmtConvAuto@@QAA@PBDZZ
??0CMiFmtConvAuto@@QAA@PB_WZZ
??0CMiHash@@QAE@XZ
??0CMiNonCopyable@@IAE@XZ
??0CMiProcess@@QAE@XZ
??0CMiRegionAutoTrace@@QAE@PBD@Z
??0CMiRegularPath@@QAE@PB_WHH@Z
??0CMiRegularPathEx@@QAE@PB_WH@Z
??0CMiStdVersion@@QAE@XZ
??0CMiStringUtil@@QAE@XZ
??0CMiThread@@QAE@PAVIMiRunable@@@Z
??0MiGZip@@QAE@XZ
??1CMiConv@@QAE@XZ
??1CMiConvAuto@@QAE@XZ
??1CMiCriticalSection@@UAE@XZ
??1CMiFmtConvAuto@@QAE@XZ
??1CMiHash@@QAE@XZ
??1CMiNonCopyable@@IAE@XZ
??1CMiProcess@@UAE@XZ
??1CMiRegionAutoTrace@@QAE@XZ
??1CMiRegularPath@@QAE@XZ
??1CMiRegularPathEx@@QAE@XZ
??1CMiStdVersion@@QAE@XZ
??1CMiStringUtil@@QAE@XZ
??1CMiThread@@UAE@XZ
??1MiGZip@@UAE@XZ
??4CMiStdVersion@@QAEAAV0@ABV0@@Z
??4MiAppUtil@@QAEAAV0@ABV0@@Z
??4MiFileUtil@@QAEAAV0@ABV0@@Z
??4MiFwUsbUtil@@QAEAAV0@ABV0@@Z
??4MiOSUtil@@QAEAAV0@ABV0@@Z
??8CMiStdVersion@@QBE_NABV0@@Z
??9CMiStdVersion@@QBE_NABV0@@Z
??BCMiRegularPath@@QAEPA_WXZ
??BCMiRegularPath@@QAEPB_WXZ
??BCMiRegularPathEx@@QAEPA_WXZ
??MCMiStdVersion@@QBE_NABV0@@Z
??NCMiStdVersion@@QBE_NABV0@@Z
??OCMiStdVersion@@QBE_NABV0@@Z
??PCMiStdVersion@@QBE_NABV0@@Z
??_7CMiCriticalSection@@6B@
??_7CMiProcess@@6B@
??_7CMiThread@@6B@
??_7MiGZip@@6B@
??_FCMiThread@@QAEXXZ
?AppendPath@MiFileUtil@@SAHPA_WKPB_W@Z
?BackupFileAssociation@MiOSUtil@@SAHPB_W@Z
?C2T@CMiConv@@QAEPA_WPBD@Z
?C2UE@CMiConv@@QAEPADPBD@Z
?C2W@CMiConv@@QAEPA_WPBD@Z
?CheckFileAssociation@MiOSUtil@@SAHPB_WPA_WPAK@Z
?Compare@CMiHash@@QAEHAAV1@@Z
?Compare@CMiHash@@QAEHPAEK@Z
?Compare@CMiHash@@QAEHPB_W@Z
?CompareStringA@CMiStringUtil@@SAHPBD0H@Z
?CompareStringT@CMiStringUtil@@SAHPB_W0H@Z
?CompareStringW@CMiStringUtil@@SAHPB_W0H@Z
?ComputeBinHash@CMiHash@@QAEHPBXKW4MiHashType@@@Z
?ComputeFileHash@CMiHash@@QAEHPB_WW4MiHashType@@@Z
?CopyFileW@MiFileUtil@@SAHPB_W0H@Z
?CopyPath@MiFileUtil@@SAHPB_W0H@Z
?Create@CMiProcess@@QAEHPB_WG0H@Z
?CreateDirectoryW@MiFileUtil@@SAHPB_WH@Z
?CreateFileAssociation@MiOSUtil@@SAHPB_W000@Z
?CreateFileShortcut@MiOSUtil@@SA_NPB_W000G000H@Z
?CreateFixedSizeFile@MiFileUtil@@SAHPB_WKK@Z
?DeleteFileW@MiFileUtil@@SAHPB_W@Z
?DeletePath@MiFileUtil@@SAHPB_WH@Z
?Destroy@CMiProcess@@QAEHXZ
?DestroyFileAssociation@MiOSUtil@@SAHPB_W@Z
?Detach@CMiProcess@@QAEPAXXZ
?Detach@CMiThread@@QAEPAXXZ
?FileTimeToUnixTime@MiFileUtil@@SA_JU_FILETIME@@@Z
?FindProcess@MiOSUtil@@SAHPB_W@Z
?FontExists@MiOSUtil@@SA_NPAUHDC__@@PB_W@Z
?FreeBuffer@MiFileUtil@@SAXPAX@Z
?FreeHash@CMiHash@@AAEXXZ
?GetAbsolutePathByApp@MiAppUtil@@SAHPA_WKPB_W1@Z
?GetAbsolutePathByModule@MiAppUtil@@SAHPAUHINSTANCE__@@PA_WKPB_W2@Z
?GetAppDataPath@MiOSUtil@@SA_NPA_WK@Z
?GetAppName@MiAppUtil@@SAHPA_WK@Z
?GetAppPath@MiAppUtil@@SAHPA_WK@Z
?GetDefaultSlash@MiFileUtil@@SA_WXZ
?GetDeskPath@MiOSUtil@@SA_NPA_WK@Z
?GetDeviceRegistryPropertyStrings@MiFwUsbUtil@@CA_NPAXPAU_SP_DEVINFO_DATA@@KAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?GetErrorDescription@MiOSUtil@@SAHKPA_WKK@Z
?GetErrorDescriptionByFile@MiOSUtil@@SAHPB_WKPA_WKK@Z
?GetErrorDescriptionByHMODULE@MiOSUtil@@SAHPAUHINSTANCE__@@KPA_WKK@Z
?GetExitCode@CMiProcess@@QAEHPAK@Z
?GetExitCode@CMiThread@@QAEHPAK@Z
?GetFileSize@MiFileUtil@@SA_KPB_W@Z
?GetFileTime@MiFileUtil@@SAHPB_WPA_K11_N@Z
?GetLastPathBySeperator@MiFileUtil@@SAPB_WPB_W@Z
?GetLocalAppDataPath@MiOSUtil@@SA_NPA_WK@Z
?GetModuleName@MiAppUtil@@SAHPAUHINSTANCE__@@PA_WK@Z
?GetModulePath@MiAppUtil@@SAHPAUHINSTANCE__@@PA_WK@Z
?GetProcessHandle@CMiProcess@@QBEPAXXZ
?GetProfilePath@MiOSUtil@@SA_NPA_WK@Z
?GetSMPrograms@MiOSUtil@@SA_NPA_WK@Z
?GetSlashs@MiFileUtil@@SAPB_WXZ
?GetStdErrorHandle@CMiProcess@@QBEPAXXZ
?GetStdOutHandle@CMiProcess@@QBEPAXXZ
?Is64Bit@MiOSUtil@@SAHXZ
?IsAbsolutePath@MiFileUtil@@SAHPB_W@Z
?IsDevicePresent@MiFwUsbUtil@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?IsDirectoryExists@MiFileUtil@@SAHPB_W@Z
?IsFileExists@MiFileUtil@@SAHPB_W@Z
?IsRegularPath@MiFileUtil@@SAHPB_W@Z
?IsRuning@CMiProcess@@QAEHXZ
?IsRuning@CMiThread@@QAEHXZ
?IsSlash@MiFileUtil@@SAH_W@Z
?IsUserAdmin@MiOSUtil@@SAHXZ
?IsValidFileName@MiFileUtil@@SAHPB_W@Z
?IsVista@MiOSUtil@@SAHXZ
?IsWin7@MiOSUtil@@SAHXZ
?IsWin8@MiOSUtil@@SAHXZ
?IsWinNT5@MiOSUtil@@SAHXZ
?IsWinNT6@MiOSUtil@@SAHXZ
?IsWinXP@MiOSUtil@@SAHXZ
?IsXML@MiFileUtil@@SAHPB_W@Z
?Join@CMiProcess@@QAEHKPAK@Z
?Join@CMiThread@@QAEHKPAK@Z
?Lock@CMiCriticalSection@@QAEXXZ
?MakesureDirectoryExsits@MiFileUtil@@SAHPB_WH@Z
?MakesureDirectoryOfFileExists@MiFileUtil@@SAHPB_WH@Z
?MiCoreMsgBoxAssertExA@@YAXPBDH0@Z
?MiCoreMsgBoxAssertExW@@YAXPBDHPB_W@Z
?MovePath@MiFileUtil@@SAHPB_W0H@Z
?Read@CMiProcess@@QAEHPAXKPAKKH@Z
?ReadAllBinary@MiFileUtil@@SAHPB_WPAPAEKPAH@Z
?ReadAllText@MiFileUtil@@SAHPB_WPAPA_W@Z
?ReadAllTextA@MiFileUtil@@SAHPB_WPAPAD@Z
?ReadAllTextW@MiFileUtil@@SAHPB_WPAPA_W@Z
?ReadPropertyAsString@MiFwUsbUtil@@CA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KK@Z
?RegularDirectory@MiFileUtil@@SAHPA_WK@Z
?RegularPath@MiFileUtil@@SAXPA_W@Z
?RegularPathEx@MiFileUtil@@SAXPA_W_W@Z
?RenamePath@MiFileUtil@@SAHPB_W0H@Z
?RestoreFileAssociation@MiOSUtil@@SAHPB_W@Z
?Resume@CMiThread@@QAEHXZ
?Run@CMiThread@@MAEIXZ
?SThreadProc@CMiThread@@CGIPAX@Z
?SetAppUserModelID@MiOSUtil@@SA_NPB_W@Z
?SetFileTime@MiFileUtil@@SAHPB_WPA_K11_N@Z
?SetVersion@CMiStdVersion@@QAEHHHHH@Z
?SetVersionString@CMiStdVersion@@QAEHPB_W@Z
?SetVersionString@CMiStdVersion@@QAEHPB_WII@Z
?SplitePath@MiFileUtil@@SAHPB_WPA_WK1K1K1K@Z
?Start@CMiThread@@QAEHI@Z
?Stop@CMiThread@@QAEHK@Z
?StopRequest@CMiThread@@MAEHXZ
?Suspend@CMiThread@@QAEHXZ
?T2C@CMiConv@@QAEPADPB_W@Z
?T2T@CMiConv@@QAEPA_WPB_W@Z
?T2UE@CMiConv@@QAEPADPB_W@Z
?T2W@CMiConv@@QAEPA_WPB_W@Z
?TerminateProcess@MiOSUtil@@SAHPB_W@Z
?ToLPCSTR@CMiConvAuto@@QAEPBDXZ
?ToLPCSTR@CMiFmtConvAuto@@QAEPBDXZ
?ToLPCTSTR@CMiConvAuto@@QAEPB_WXZ
?ToLPCTSTR@CMiFmtConvAuto@@QAEPB_WXZ
?ToLPCUTF8@CMiConvAuto@@QAEPBDXZ
?ToLPCWSTR@CMiConvAuto@@QAEPB_WXZ
?ToLPCWSTR@CMiFmtConvAuto@@QAEPB_WXZ
?ToLPSTR@CMiConvAuto@@QAEPADXZ
?ToLPTSTR@CMiConvAuto@@QAEPA_WXZ
?ToLPUTF8@CMiConvAuto@@QAEPADXZ
?ToLPWSTR@CMiConvAuto@@QAEPA_WXZ
?ToString@CMiHash@@QAEHPA_WK@Z
?Trim@CMiStringUtil@@SAPA_WPA_WPB_W@Z
?TrimLeft@CMiStringUtil@@SAPA_WPA_WPB_W@Z
?TrimRight@CMiStringUtil@@SAPA_WPA_WPB_W@Z
?TryLock@CMiCriticalSection@@QAEHXZ
?UE2C@CMiConv@@QAEPADPBD@Z
?UE2T@CMiConv@@QAEPA_WPBD@Z
?UE2W@CMiConv@@QAEPA_WPBD@Z
?Unlock@CMiCriticalSection@@QAEXXZ
?W2C@CMiConv@@QAEPADPB_W@Z
?W2T@CMiConv@@QAEPA_WPB_W@Z
?W2UE@CMiConv@@QAEPADPB_W@Z
?Wait@CMiProcess@@QAEHK@Z
?Write@CMiProcess@@QAEHPBXKPAK@Z
?WriteBinary@MiFileUtil@@SAHPB_WPBXKHH@Z
?WriteText@MiFileUtil@@SAHPB_W0H@Z
?WriteTextA@MiFileUtil@@SAHPB_WPBDH@Z
?WriteTextW@MiFileUtil@@SAHPB_W0H@Z
?Zip@MiGZip@@QAEPAEPBEIPAI@Z
MiC2C
MiC2UE
MiC2W
MiCheckUE
MiFree
MiSetConversionACP
MiUE2C
MiUE2UE
MiUE2W
MiW2C
MiW2UE
MiW2W
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ