Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0253bad1349e880b37193b5f48145520_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0253bad1349e880b37193b5f48145520_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
Target
0253bad1349e880b37193b5f48145520_NeikiAnalytics
Size
435KB
MD5
0253bad1349e880b37193b5f48145520
SHA1
0411f6fe60ede827932005c0f9f36c7655d4e3bd
SHA256
ca856e8d97a5d932c38f8f5d957b319dc7e19bfa6b8f12c955a9e0f5e20abdbc
SHA512
74eedb4cc94024de97c19bfec04fbbb66c7283764aee625a1d015df91eb67238ba7cafc48198826b2ad59cf14e855a8cc63e541be30924247e5b35cfe21a179b
SSDEEP
12288:BfHSAgkvNDVDN/kgloaqoj3SYSTMBymBjvrEH7BJk1h:BfHgkFpN/kIXS4BywrEH7QD
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord266
ord335
ord1646
ord6121
ord3490
ord6510
ord799
ord612
ord801
fclose
isspace
fprintf
isxdigit
atoi
sscanf
strncmp
tolower
isupper
strncpy
strtoul
malloc
memmove
_gmtime64
sprintf
fseek
?terminate@@YAXXZ
_encode_pointer
_malloc_crt
_encoded_null
memcpy
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
ftell
_setmode
fwrite
ferror
_fileno
fread
fopen
fgets
_errno
_wfopen
fflush
feof
getenv
_time64
strcmp
qsort
memchr
isdigit
vfprintf
_vsnprintf
wcsstr
_exit
__iob_func
raise
strstr
realloc
free
strchr
__CxxFrameHandler3
_purecall
memset
_decode_pointer
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcessId
CloseHandle
GetVersionExA
LoadLibraryA
GetTickCount
QueryPerformanceCounter
FreeLibrary
GlobalMemoryStatus
GetVersion
GetCurrentThreadId
GetModuleHandleA
GetFileType
GetProcAddress
GetLastError
GetStdHandle
MultiByteToWideChar
GetSystemTimeAsFileTime
GetDesktopWindow
GetUserObjectInformationW
MessageBoxA
GetProcessWindowStation
DeregisterEventSource
ReportEventA
RegisterEventSourceA
??0CCipher@rsa@@QAE@ABV01@@Z
??0CCipher@rsa@@QAE@XZ
??0CKey@rsa@@QAE@XZ
??0CKeyGenParameterSpec@rsa@@QAE@HK@Z
??0CKeyPair@rsa@@QAE@XZ
??0CKeyPairGenerator@rsa@@QAE@ABV01@@Z
??0CKeyPairGenerator@rsa@@QAE@XZ
??0CPrivateKey@rsa@@QAE@XZ
??0CPublicKey@rsa@@QAE@XZ
??1CCipher@rsa@@UAE@XZ
??1CKey@rsa@@UAE@XZ
??1CKeyPair@rsa@@UAE@XZ
??1CKeyPairGenerator@rsa@@UAE@XZ
??1CPrivateKey@rsa@@UAE@XZ
??1CPublicKey@rsa@@UAE@XZ
??4CAlgorithmParameterSpec@rsa@@QAEAAU01@ABU01@@Z
??4CCipher@rsa@@QAEAAV01@ABV01@@Z
??4CKey@rsa@@QAEABV01@ABV01@@Z
??4CKey@rsa@@QAEABV01@ABVCByteArray@@@Z
??4CKeyGenParameterSpec@rsa@@QAEAAU01@ABU01@@Z
??4CKeyPairGenerator@rsa@@QAEAAV01@ABV01@@Z
??_7CCipher@rsa@@6B@
??_7CKey@rsa@@6B@
??_7CKeyPair@rsa@@6B@
??_7CKeyPairGenerator@rsa@@6B@
??_7CPrivateKey@rsa@@6B@
??_7CPublicKey@rsa@@6B@
?Key@CKey@rsa@@UAEPAEXZ
?Key@CKey@rsa@@UBEPAEXZ
?KeyBits@CKey@rsa@@UBEHXZ
?KeyBytes@CKey@rsa@@UBEHXZ
?genKeyPair@CKeyPairGenerator@rsa@@UAEPAVCKeyPair@2@XZ
?generateKeyPair@CKeyPairGenerator@rsa@@UAEPAVCKeyPair@2@XZ
?getModulus@CPrivateKey@rsa@@UAEAAVCByteArray@@XZ
?getModulus@CPublicKey@rsa@@UAEAAVCByteArray@@XZ
?getPrivate@CKeyPair@rsa@@UAEPAVCPrivateKey@2@XZ
?getPrivateExponent@CPrivateKey@rsa@@UAEAAVCByteArray@@XZ
?getPublic@CKeyPair@rsa@@UAEPAVCPublicKey@2@XZ
?getPublicExponent@CPublicKey@rsa@@UAEAAVCByteArray@@XZ
?initialize@CKeyPairGenerator@rsa@@UAEXAAUCAlgorithmParameterSpec@2@@Z
?release@CCipher@rsa@@UAEXXZ
?release@CKey@rsa@@UAEXXZ
?release@CKeyPair@rsa@@UAEXXZ
?release@CKeyPairGenerator@rsa@@UAEXXZ
rsaCreateCipher
rsaCreateKeyPair
rsaReleaseCipher
rsaReleaseKeyPair
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ