Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
e88078fcadea8fa1baeb82fabfac3d60_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e88078fcadea8fa1baeb82fabfac3d60_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
Target
e88078fcadea8fa1baeb82fabfac3d60_NeikiAnalytics
Size
331KB
MD5
e88078fcadea8fa1baeb82fabfac3d60
SHA1
51cd14bc7fac828820b73eff2e66beed16a58c98
SHA256
11be7a0fd9833bcbbc7753efb714abee087b0a818bbf5f9b444c03af31135b5e
SHA512
bcac909b4afd63fe23069523863f3524de576d50afa1b2c0473ada762f1bb478afffe7afbad84eddbebe7646f1703c934e75300d4f3361d5ad8f3430c6320308
SSDEEP
3072:kEAGrlnA2vA/5GgdWevh5iXpRjCMjVHjZehB2pvJHfObnS2MfwTxtXbPm2mbqAgZ:0GhnA2xgdWevXiXz/PM2bno1tabEP
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\a_work\2\s\MSRTC\msrtc\build.d\output\ssScreenVVS2.pdb
?sleep@spl@@YAXI@Z
?FreeDynamicLibrary@spl@@YAXPAX@Z
?GetFunctionAddress@spl@@YAPAXPAXPBD@Z
?LoadDynamicLibrary@spl@@YAPAXPB_WW4DynLibMode@1@@Z
?abort@spl@@YAXXZ
splFailBufferOverlap
?wcscpy_s@spl@@YAHPA_WIPB_W@Z
?decodeToWide@spl@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string_view@DU?$char_traits@D@std@@@3@W4utfEncodingMask@1@@Z
?abortWithStackTrace@spl@@YAXXZ
?destroyEnd@MutexCheck@MutexWrapperData@auf@@SAXAAV23@_N@Z
?unlockBegin@MutexCheck@MutexWrapperData@auf@@QAE_NXZ
?lockEnd@MutexCheck@MutexWrapperData@auf@@QAEXXZ
?lockBegin@MutexCheck@MutexWrapperData@auf@@QAE_NXZ
?mutexUnlock@internal@spl@@YAXAAUWinMutex@12@@Z
?mutexLock@internal@spl@@YAXAAUWinMutex@12@@Z
?mutexDestroy@internal@spl@@YAXAAUWinMutex@12@@Z
?mutexCreate@internal@spl@@YA_NAAUWinMutex@12@_NPBD@Z
?threadCurrentId@spl@@YAIXZ
?encodeUtf8@internal@spl@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBXIIW4utfEncodingMask@2@@Z
?startImp@auf@@YAXPAUSplOpaqueUpperLayerThread@@PAUVarBase@spl@@@Z
?getImp@ThreadRef@auf@@ABEPAUSplOpaqueUpperLayerThread@@XZ
?join@ThreadRef@auf@@QAE_NPAH@Z
??4ThreadRef@auf@@QAEAAV01@ABV01@@Z
??1ThreadRef@auf@@QAE@XZ
??0ThreadRef@auf@@QAE@PBDII@Z
?unregisterCall@internal@rt@@YAXPAX@Z
?registerCall@internal@rt@@YAXPAX@Z
?log@LogComponent@auf@@QAEXPBXIIABVLogArgs@2@@Z
?sleep@spl@@YAXV?$duration@_JU?$ratio@$00$0PECEA@@std@@@chrono@std@@@Z
?memMalloc@spl@@YAPAXI@Z
?log@LogComponent@auf@@QAEXIIABVLogArgs@2@@Z
?stop@auf@@YAXPAUAufInitTag@1@PBD@Z
?init@internal@auf@@YA_NPAUAufInitTag@2@PBDII@Z
?instantiateLogComponent@internal@auf@@YAPAVLogComponent@2@PBD@Z
?setLogComponentSafe@internal@auf@@YA_NPBD_N1@Z
RtcPalMFHasDXGI
RaiseException
lstrlenW
lstrcmpW
RtcPalGetEcsSetting
GetLastError
DisableThreadLibraryCalls
LoadLibraryW
GetProcAddress
GetModuleHandleW
OpenProcess
CloseHandle
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemInfo
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
K32GetModuleFileNameExW
K32GetProcessImageFileNameW
FreeLibrary
VirtualProtect
VirtualQuery
LoadLibraryExA
_except_handler4_common
__std_terminate
__CxxFrameHandler3
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
_purecall
memcmp
memchr
wcsstr
memcpy
_CxxThrowException
memmove
__std_exception_destroy
__std_exception_copy
_initterm
_initterm_e
_seh_filter_dll
_invalid_parameter_noinfo
_initialize_narrow_environment
_beginthreadex
_errno
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_configure_narrow_argv
CreateDXGIFactory1
ord1
DwmGetWindowAttribute
DwmIsCompositionEnabled
ord102
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
MagSetWindowFilterList
MagSetImageScalingCallback
MagSetWindowTransform
MagUninitialize
MagSetWindowSource
MagInitialize
EqualRgn
GetDeviceCaps
BitBlt
CreateDCW
GetDIBits
CombineRgn
CreateCompatibleDC
CreateRectRgn
DeleteDC
FillRgn
GetRegionData
GetStockObject
OffsetRgn
SelectObject
CreateDIBSection
DeleteObject
GetWindowRgn
ReleaseDC
PrintWindow
GetSystemMetrics
GetAncestor
GetComboBoxInfo
GetCursorInfo
SetRectEmpty
GetDisplayConfigBufferSizes
DisplayConfigGetDeviceInfo
QueryDisplayConfig
IsRectEmpty
GetWindowDC
MonitorFromWindow
GetIconInfo
DrawIconEx
SetWindowLongW
PtInRect
IntersectRect
InflateRect
SetLayeredWindowAttributes
GetLayeredWindowAttributes
UnhookWinEvent
SetWinEventHook
DestroyWindow
CreateWindowExA
RegisterClassExA
UnregisterClassA
PostQuitMessage
DefWindowProcW
DispatchMessageW
RegisterWindowMessageW
SendMessageW
PostMessageW
IsWindow
IsIconic
GetForegroundWindow
FindWindowA
FindWindowExW
TranslateMessage
SystemParametersInfoW
MonitorFromRect
GetClassNameW
GetWindowPlacement
IsWindowVisible
GetDC
GetWindowRect
SetRect
CopyRect
OffsetRect
EqualRect
GetWindowLongW
EnumWindows
GetWindowThreadProcessId
GetWindow
EnumDisplaySettingsW
EnumDisplayDevicesW
MonitorFromPoint
GetMonitorInfoW
GetWindowInfo
GetMessageW
_Thrd_id
_Thrd_join
_Unlock_shared_ptr_spin_lock
_Cnd_do_broadcast_at_thread_exit
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
_Query_perf_frequency
_Query_perf_counter
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Xlength_error@std@@YAXPBD@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
_Lock_shared_ptr_spin_lock
wcscmp
abs
_callnewh
malloc
free
ceil
floor
fabs
CoCreateFreeThreadedMarshaler
CreateScreenScraper
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ