Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
b64b2c032c4bf512f9269aedc02690a0_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b64b2c032c4bf512f9269aedc02690a0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
b64b2c032c4bf512f9269aedc02690a0_NeikiAnalytics
Size
362KB
MD5
b64b2c032c4bf512f9269aedc02690a0
SHA1
e10982d9c093f9312e2bde43ed336f48486e2f28
SHA256
a30c1a34e52d6c8ad650fc0b2d0973d914ac5cfe9aee7c9051ec3e22837a100e
SHA512
f987cbe11d61a64c0255e63837547d5c6c3278ca7e3c6038ce4c98cba0d10e6dbea253bf749307d00fe9fd17ca65806135e9df14dbcdf70c739cebbc177c14bb
SSDEEP
6144:ov+TybGiS1i8vujd3Xnhqads3cDrHwpeipuXSlT+MGVIqj:2qiSytgjs/HyekuOZGGm
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
O:\webex-docshare-rsk\output\maps\release\x64\atpdimp.pdb
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
GetVersionExW
FreeLibrary
GetModuleHandleW
GetProcAddress
VerifyVersionInfoW
DeleteFileW
GetTempFileNameW
GetTempPathW
SetEvent
WaitForSingleObject
CreateEventW
CreateThread
GetCurrentThreadId
SetThreadPriority
TerminateThread
SuspendThread
ResumeThread
lstrlenW
EnterCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
lstrcmpiW
GetShortPathNameW
SetFileAttributesW
Sleep
GetVersion
GetSystemDirectoryW
lstrcatW
_lclose
CopyFileW
GetComputerNameW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetFileSize
WriteFile
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
LocalFree
FormatMessageW
GetExitCodeProcess
lstrcmpW
lstrcpynW
GetProfileStringW
WriteProfileStringW
GetTickCount
lstrlenA
GetEnvironmentVariableW
OutputDebugStringW
Module32FirstW
Module32NextW
VirtualQuery
IsBadReadPtr
CloseHandle
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
ExpandEnvironmentStringsW
GetFileAttributesW
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
LoadLibraryW
CreateFileW
OpenProcess
ReadFile
SetFilePointer
RtlCaptureContext
PeekMessageW
MsgWaitForMultipleObjects
SendMessageW
GetDC
GetDesktopWindow
DestroyWindow
wsprintfW
CharNextW
PostMessageW
SetTimer
SetPropW
GetPropW
LoadIconW
RemovePropW
SendNotifyMessageW
MonitorFromPoint
MonitorFromWindow
DispatchMessageW
UnregisterClassW
GetMonitorInfoW
LoadStringW
LoadCursorW
LoadBitmapW
LoadMenuW
SetWinMetaFileBits
DeleteEnhMetaFile
GetEnhMetaFileBits
GetPrinterW
AbortPrinter
EndDocPrinter
ClosePrinter
SetPrinterW
EnumPortsW
EnumPrintersW
OpenPrinterW
SetJobW
DeviceCapabilitiesW
EnumJobsW
DeletePrinterDriverW
GetPrinterDriverDirectoryW
GetPrinterDriverW
EnumPrinterDriversW
RegQueryInfoKeyW
RegOpenKeyW
RevertToSelf
ImpersonateLoggedOnUser
OpenProcessToken
RegCreateKeyW
GetUserNameW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
ShellExecuteExW
ShellExecuteW
FindExecutableW
OleInitialize
CoUninitialize
CoCreateInstance
OleUninitialize
CLSIDFromProgID
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
SysStringLen
VarBstrCat
VarUI4FromStr
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetDim
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantInit
VariantClear
SysFreeString
SysAllocString
SysAllocStringLen
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Mbrtowc
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGD@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@G@Z
??0_Lockit@std@@QEAA@H@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
??1_Lockit@std@@QEAA@XZ
_Wcscoll
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
_Wcsxfrm
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??Bid@locale@std@@QEAA_KXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?is@?$ctype@G@std@@QEBA_NFG@Z
?tolower@?$ctype@G@std@@QEBAGG@Z
?uncaught_exception@std@@YA_NXZ
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@AEAG@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?id@?$collate@G@std@@2V0locale@2@A
?id@?$ctype@G@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
PathFileExistsW
memchr
__current_exception_context
__current_exception
strchr
memcmp
_local_unwind
__C_specific_handler
_purecall
wcsstr
wcsrchr
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
memmove
memcpy
__std_type_info_destroy_list
__CxxFrameHandler4
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initterm
_crt_at_quick_exit
_configure_narrow_argv
_seh_filter_dll
_errno
terminate
_cexit
_invalid_parameter_noinfo_noreturn
_endthreadex
_beginthreadex
_initterm_e
_crt_atexit
_initialize_narrow_environment
_invalid_parameter_noinfo
tolower
isspace
isdigit
toupper
wcscpy_s
wcscat_s
wcsncpy
iswdigit
wcscpy
iswspace
_wcsdup
strlen
wcscat
towupper
wcsncpy_s
wcslen
_wcsupr
malloc
calloc
realloc
_callnewh
_recalloc
free
_time64
_localtime64
_strtime
_ftime64
fread
_wfopen
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
_wsopen_dispatch
__stdio_common_vfprintf
fflush
__stdio_common_vfwprintf
__stdio_common_vswprintf_s
__stdio_common_vswprintf
fclose
_wmakepath
_wsplitpath
_wstat64i32
atoi
_itow
_wtoi64
atof
_wtoi
PDIMPCreateInstance
PDIMP_PDSetDefaultPrinter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ