Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
9c6dc87b7c883cc8b473d7f4091eabd0_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9c6dc87b7c883cc8b473d7f4091eabd0_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
Target
9c6dc87b7c883cc8b473d7f4091eabd0_NeikiAnalytics
Size
1.0MB
MD5
9c6dc87b7c883cc8b473d7f4091eabd0
SHA1
608f4ad034118b9cce3a764749665b6843f0c8f5
SHA256
58aa8bfb1db19817c815ec6947cbfe8ef5a8676a3057191156bd1afad0e854b8
SHA512
16e9a6bd69e55bb261f9e116abf5627fe4c430420ae483259a8c4cae42cf4427deeba26a35f47122ef164b46c49d9891624948368bae346983a3659432190dec
SSDEEP
24576:3HpC8Jf8DTIFovJOmUXoi505ww0lS4ed1RwarEH7D:3qD8foi5swwnRq
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
dopuslib32.pdb
GlobalLock
lstrcmpiW
GlobalUnlock
GlobalFree
FindFirstFileW
FindNextFileW
FindClose
GetWindowsDirectoryW
CreateProcessW
GlobalSize
GlobalDeleteAtom
GetModuleHandleW
GlobalAddAtomW
GlobalAlloc
VerSetConditionMask
VerifyVersionInfoW
InitializeCriticalSection
TlsAlloc
GetProcAddress
GetLocaleInfoW
lstrcmpW
CreateMutexW
DeleteCriticalSection
TlsFree
FreeLibrary
WaitForSingleObject
GetCurrentThreadId
OutputDebugStringW
TlsGetValue
TlsSetValue
CreateEventW
SetEvent
TerminateThread
SetDllDirectoryW
FindResourceW
LoadResource
LockResource
SizeofResource
LoadLibraryW
GetUserDefaultLangID
GetACP
ExitProcess
GetCurrentDirectoryW
ReleaseMutex
HeapCreate
HeapAlloc
HeapDestroy
GetPrivateProfileStringW
LoadLibraryExW
EnumResourceNamesW
LocalReAlloc
CreateFileA
WriteFile
GetCurrentProcess
ProcessIdToSessionId
InitializeCriticalSectionEx
DecodePointer
GetNumberFormatW
CompareStringW
SetErrorMode
GetProcessHeap
HeapFree
FileTimeToSystemTime
SystemTimeToFileTime
IsWow64Process
CreateFileW
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
ReadFile
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
IsThreadpoolTimerSet
CreateThreadpoolTimer
DeviceIoControl
GetDiskFreeSpaceW
GetDriveTypeW
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
GetFileSizeEx
SetFileInformationByHandle
GetFileInformationByHandle
SetFileTime
CreateThreadpoolWork
SubmitThreadpoolWork
CallbackMayRunLong
SetFilePointerEx
ReOpenFile
Wow64DisableWow64FsRedirection
SetEndOfFile
GetFileSize
Sleep
OpenFileMappingW
UnmapViewOfFile
CloseHandle
WriteConsoleW
GetConsoleOutputCP
SetStdHandle
GetFileAttributesExW
GetTimeZoneInformation
ReadConsoleW
GetConsoleMode
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
HeapReAlloc
GetFileType
GetStdHandle
HeapSize
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
RtlUnwind
RaiseException
GetCPInfo
CompareStringEx
LCMapStringEx
EncodePointer
GetSystemTime
FlushFileBuffers
CompareFileTime
lstrcpynA
IsBadStringPtrW
GetFileTime
MoveFileExW
FindFirstFileExW
LocalFree
MapViewOfFile
CreateFileMappingW
GetCurrentProcessId
GetUserPreferredUILanguages
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
Wow64RevertWow64FsRedirection
DeleteFileW
GetFileAttributesW
GetSystemDirectoryW
GetTickCount
NormalizeString
GetStringTypeW
GetStringTypeA
lstrlenW
lstrlenA
WideCharToMultiByte
LocalAlloc
CreateDirectoryW
FileTimeToDosDateTime
FileTimeToLocalFileTime
lstrcpyA
LocalFileTimeToFileTime
DosDateTimeToFileTime
lstrcpyW
lstrcpynW
lstrcatW
IsBadReadPtr
MoveFileW
ReplaceFileW
SetFileAttributesW
TerminateProcess
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetLastError
GetLastError
MultiByteToWideChar
SetFilePointer
VirtualQuery
CharNextW
CharPrevW
CharUpperBuffW
SetCursor
LoadCursorW
GetActiveWindow
SetDlgItemTextW
SetWindowTextW
EndDialog
CharLowerW
CharUpperA
CharUpperW
wsprintfW
DialogBoxParamW
IsWindow
GetClipboardFormatNameW
ReleaseDC
FillRect
GetWindowDC
GetWindowRect
SetScrollInfo
GetClientRect
LoadStringW
CallNextHookEx
KillTimer
GetKeyState
GetWindowThreadProcessId
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
TrackPopupMenu
GetCursorPos
SetMenuDefaultItem
SetMenuItemBitmaps
SetMenuItemInfoW
GetSubMenu
LoadMenuW
GetAsyncKeyState
EnumWindows
IsWindowVisible
FindWindowExW
AllowSetForegroundWindow
DefWindowProcW
FreeDDElParam
UnpackDDElParam
SetWindowLongW
GetWindowLongW
DispatchMessageW
TranslateMessage
GetMessageW
SetTimer
IsWindowUnicode
SetForegroundWindow
CreateWindowExW
RegisterClassExW
DestroyWindow
GetSysColor
LoadImageW
PostMessageW
SendMessageW
DestroyMenu
GetMenuItemInfoW
GetMenuItemCount
CreatePopupMenu
GetClassNameW
GetForegroundWindow
RegisterClipboardFormatW
InsertMenuItemW
GetSystemMetrics
FindWindowW
RegisterWindowMessageW
SendMessageTimeoutW
PostQuitMessage
SelectObject
CreateCompatibleDC
DeleteDC
BitBlt
GetPixel
SetPixel
CreateCompatibleBitmap
DeleteObject
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyExW
GetTokenInformation
OpenProcessToken
SHGetFolderPathW
SHGetFileInfoW
SHGetSpecialFolderLocation
SHParseDisplayName
ord152
SHChangeNotify
DragQueryFileW
ShellExecuteExW
SHBindToParent
ord155
SHGetDesktopFolder
SHGetPathFromIDListW
CoUninitialize
ReleaseStgMedium
StringFromGUID2
CoInitialize
CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoCreateGuid
SysFreeString
VariantClear
VariantInit
SysAllocString
ord413
ord412
ord410
UuidToStringW
UuidFromStringA
RpcStringFreeW
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
PathAppendW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
ord10
ord9
ord8
PathIsRelativeW
StrRetToBufW
IsAppThemed
GetThemeAppProperties
IsThemeActive
WTSFreeMemory
WTSQuerySessionInformationW
GetSaveFileNameW
??0LibStringW@@QAE@H_N@Z
??0LibStringW@@QAE@XZ
??1LibStringW@@QAE@XZ
??4Hash@@QAEAAV0@$$QAV0@@Z
??4Hash@@QAEAAV0@ABV0@@Z
?End@Hash@@QAEXIPAE@Z
?End@Hash@@QAEXPADIPAEI@Z
?EndHash@Hash@@QAEXIPAE@Z
?GetString@LibStringW@@QAEPB_WXZ
?HashData@Hash@@QAEXPBXI@Z
?HashSize@Hash@@QAEHXZ
?Init@Hash@@QAEXW4HashMethod@@@Z
?Init@LibStringW@@QAEPB_WH_N@Z
?MAX_HASH_SIZE@Hash@@2IB
?SumToString@Hash@@SAXPBEPADII@Z
AllocMatchPatternW
AsciiToHex64A
AsciiToHex64W
AsciiToHexA
AsciiToHexW
AutoUpdateWindowScrollbars
Base64DecodeStringA
Base64DecodeStringW
Base64DecodeToVector
Base64Encode
Base64EncodeString
BeginNamedThread
BindToShellFolder
BoyerAllocA
BoyerAllocW
BoyerFindA
BoyerFindNoCaseA
BoyerFindNoCaseW
BoyerFindW
BoyerFree
BoyerIsPatternUnicode
BoyerRFindW
BytesToStringW
ComparePathStringW
ConvertLocalFileTimeToUTCFileTime
ConvertLocalSystemTimeToUTCFileTime
ConvertSTRRET
ConvertUTCFileTimeToLocalTime
ConvertUTCSystemTimeToLocalTime
DivideToStringW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DoesExeFileContainZip
DummyDllFunctionToAvoidSymbolConfusion
ExtractFTPSiteAndPathW
FileSystemCompareString
FindFileExtensionW
FindFilePartW
FindOrStartDOpusW
FreeFavoritesList
FreeMatchPattern
GUIDSame
GetDOpusPathW
GetDWORDFromDataObjectOnHGlobal
GetDWORDLONGFromDataObjectOnHGlobal
GetDWORD_PTRFromDataObjectOnHGlobal
GetDataObjectOnHGlobal
GetDataObjectOnHGlobalHRes
GetDllVersion
GetEntryLabelA
GetEntryLabelW
GetEntryPathA
GetEntryPathW
GetFavoritesList
GetFirstPathEntry
GetFirstSubfolder
GetLocalNumberFormatW
GetMultibytePathFromUnicodeNameA
GetMultibytePathFromUnicodeNameW
GetNextPathEntry
GetNextSubfolder
GetNumberStringW
GetPathAliasList
GetPidlFromDDEString
GetRecentList
GetShellFolder
GetSmartFavoritesList
GetUserPrefsFlag
ILAppend
ILBindToParent
ILCompare
ILCopy
ILFindLast
ILGetCount
ILGetFirst
ILGetLast
ILGetParent
ILRestoreChild
ILRestoreFirst
ILSize
ILStripChild
IsFTPPathA
IsFTPPathW
IsLibraryPathW
IsPatternUnicode
IsPatternValid
IsPatternWild
IsStringNonASCII
IsStringUnicode
IsWildToken
IsWow64
L64ToHexStringA
L64ToHexStringW
L64ToStringA
L64ToStringW
LoadZipCompressedFile
MatchPatternW
NumericStrCmp
OsVer
OsVerUBR
OsVerWin10Build
PIDLAlloc
PIDLCheckCLSID
PIDLCopy
PIDLFree
PIDLFromString
PIDLGetGUID
PIDLNext
PIDLToString
ParseExplorerCmdLine
ParsePatternW
PathStrCmpW
ReadConfigFlagValue
RegExpAllocW
RegExpCompileError
RegExpCompileErrorMsg
RegExpCompileW
RegExpCountCaptureGroups
RegExpErrorMsg
RegExpFree
RegExpFreeResults
RegExpIsValidCharW
RegExpMatchW
RegExpParsed
RegExpReplaceW
RegExpUnicode
RepaintSliderSquare
SafePathAppend
SaveZipCompressedFile
StringCompareW
UpdateWindowScrollbars
WriteConfigFlagValue
recursiveDeleteKey
safestrcmpiW
strcmpnA
strcmpnHSW
strcmpnPIESW
strcmpnPSW
strcmpnW
strcmpnWPY
stricmpnA
stricmpnHSW
stricmpnPIESW
stricmpnPSW
stricmpnW
stricmpnWF
stricmpnWFPY
stricmpnWPY
strstrWPY
strstriA
strstriW
strstriWW
strstriWWPY
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ