Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0fbf9de265ea2d9392b6fcb15f581600_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0fbf9de265ea2d9392b6fcb15f581600_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
0fbf9de265ea2d9392b6fcb15f581600_NeikiAnalytics
Size
167KB
MD5
0fbf9de265ea2d9392b6fcb15f581600
SHA1
492bcbeada8e8811ac63e021d124b33eaffce998
SHA256
84473735235722925f4c5ed7071854c4e587fc1f78f0aabff8079a8b5540787b
SHA512
230a079bffc477b4014523725ac55894a8296165d772bac171241e82ed88393a8071061dab0cccd83974672c45e4b6fb1405e5d51a39dbe56bca701ab61997dd
SSDEEP
3072:FIJ5MfPhAuUBQ7Q8VbFgfnbUMjIBzsPh32xYZ:O5tuUBQ7QIbFgfbUMcBzsPPZ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
U:\AhnLab\Product\APC\Common\SelfProtect\2.0\Trunk\Build\X64Release.vc60\APCShield.pdb
DeleteCriticalSection
GetLocalTime
FileTimeToSystemTime
CreateThread
ResetEvent
CreateEventW
GetSystemDefaultLangID
TerminateThread
WaitForSingleObject
SetEvent
GetFileAttributesW
InitializeCriticalSection
GetModuleFileNameW
lstrlenW
lstrcmpiW
GetWindowsDirectoryW
GetSystemDirectoryW
OpenProcess
GetCurrentProcess
GetModuleHandleW
GetVersionExW
FindClose
FindFirstFileW
DeleteFileW
CreateFileW
ReadFile
lstrcmpW
CloseHandle
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
FreeLibrary
LoadLibraryW
GetProcAddress
SetCurrentDirectoryW
GetLastError
CreateDirectoryW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
UnhandledExceptionFilter
TerminateProcess
RegEnumKeyExW
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyW
RegSetValueExW
RegCloseKey
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegQueryInfoKeyW
ShellExecuteExW
ShellExecuteW
realloc
calloc
malloc
_onexit
__dllonexit
free
_initterm
_wfopen
fwprintf
fclose
wcsrchr
wcscmp
wcsncpy
_waccess
_wcsicmp
_wcsupr
wcsstr
_wsplitpath
memcpy
memset
wcslen
__CxxFrameHandler
??2@YAPEAX_K@Z
_vsnwprintf
??3@YAXPEAX@Z
_wcsdup
??9std@@YA_NAEBV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@AEBV10@0@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA?AV12@_K0@Z
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KXZ
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBAHPEBG@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBAHAEBV12@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@AEBV01@@Z
??0_Lockit@std@@QEAA@XZ
??1_Lockit@std@@QEAA@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV01@AEBV01@@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV12@_K0PEBG@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV12@_K0@Z
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KXZ
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBA_KPEBG_K@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2_KB
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEBAPEBGXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@PEBGAEBV?$allocator@G@1@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAAAEAV01@PEBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QEAA@AEBV?$allocator@G@1@@Z
PathFindExtensionW
PathRemoveFileSpecW
PathAppendW
PathFindFileNameW
DeInitModule
InitModule
IsSelfProtectedStarted
StartSelfProtect
StopSelfProtect
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ