Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
e3d4bbff19b69c00f4465753aa3d54c0_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e3d4bbff19b69c00f4465753aa3d54c0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
e3d4bbff19b69c00f4465753aa3d54c0_NeikiAnalytics
Size
65KB
MD5
e3d4bbff19b69c00f4465753aa3d54c0
SHA1
31a264796f074c9f6365d04541a0a06cc29f3504
SHA256
c4509435a355a7a95c8c07ca2a94a6c09f9c75ffb0e3747317478046fb34538a
SHA512
b9dd093606678e4aef2fc4d55000d8d21b9a95919fb5c72efd7de57a94b1ee0d24750a82fac5e7323e59f2b84a82a1bba8517fede2f9936b5570c631d9b4f772
SSDEEP
1536:slq/5xEEozMZMRK75bPHo4Izn1H8AgUGHOtbLCNpicp7jlPx/:slq/LEEYMeRK75bPIDR8AgUyOtbLCNpx
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\DC\_main\Output\Release\ActivationOnline.pdb
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegEnumValueW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyExW
RegQueryInfoKeyW
QueryDosDeviceA
WriteFile
LoadLibraryW
GetVersionExW
FileTimeToSystemTime
ReadFile
GetModuleFileNameW
CreateFileW
GetPrivateProfileIntW
GetLastError
GetProcAddress
FindClose
LoadLibraryA
GetModuleFileNameA
CloseHandle
GetSystemTime
InitializeCriticalSection
LeaveCriticalSection
InterlockedDecrement
DeleteCriticalSection
DeleteFileW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
ReleaseMutex
OpenMutexW
CreateMutexW
WaitForSingleObject
InterlockedIncrement
FreeLibrary
FindFirstFileW
CreateFileA
EnterCriticalSection
SetEnvironmentVariableW
InterlockedExchange
GetEnvironmentVariableW
wsprintfW
?GetRootElement@CXmlDocument@@QAE?AVCXmlNode@@XZ
?SaveXmlFile@CXmlDocument@@QAEIQAD0@Z
?SetNodeContent@CXmlNode@@QAEIQAXH@Z
?GetNodeContent@CXmlNode@@QAEIPADAAH@Z
?GetFirstElement@CXmlNode@@QAE?AV1@QAD@Z
??1CXmlNode@@QAE@XZ
??0CXmlNode@@QAE@XZ
??1CXmlDocument@@QAE@XZ
?OpenXmlFile@CXmlDocument@@QAEIQAD0@Z
??0CXmlDocument@@QAE@XZ
??4CXmlNode@@QAEAAV0@ABV0@@Z
?NodeValid@CXmlNode@@QBEHXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
PathFileExistsW
wcscpy_s
_time64
??2@YAPAXI@Z
_time32
??_V@YAXPAX@Z
sprintf_s
wcscat_s
wcschr
swscanf_s
vswprintf_s
_unlock
__dllonexit
_encode_pointer
_lock
strcat_s
_decode_pointer
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
__CxxFrameHandler3
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_localtime64
strrchr
_purecall
strcpy_s
wcsrchr
wcsncpy
strstr
sprintf
??3@YAXPAX@Z
memset
memcpy
_onexit
__RTDynamicCast
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
TBCanUnloadNow
TBCreateObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ