Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
969440e880709acae7af6f1864bbdfa0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
969440e880709acae7af6f1864bbdfa0_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Target
969440e880709acae7af6f1864bbdfa0_NeikiAnalytics.exe
Size
4.0MB
MD5
969440e880709acae7af6f1864bbdfa0
SHA1
6e36fbf71a5fe52b90675a36460dccad9348af62
SHA256
d7daa239b3a2147349fba07ab41eb87a5cbfece19197510aae653d4188aba2ad
SHA512
32c7e464db671d323f773423253f7c5e68bd60de599946556d3a0d28709b35d012465d4fb533ea9ed9744f594a5608e7dea19d2095f340d52ef5d8a5e452d3db
SSDEEP
49152:QGtlq0FVwASO3dkdUVkHX/cpdEYc2n+9i8063I9KOHcS2b3U9iLLzs2K6CiyVdtu:bgc7J4l4cVlzy25+GX
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
E:\jslave\workspace\CEP_9.2.1\P\omnius\csxs\v9_2_1\builds\native\binaries\windows\x64\Release\CEPHtmlEngine\CEPHtmlEngine.pdb
cef_api_hash
cef_v8context_get_current_context
cef_v8context_get_entered_context
cef_cookie_manager_get_global_manager
cef_browser_host_create_browser
cef_string_map_alloc
cef_string_map_free
cef_command_line_create
cef_string_list_size
cef_string_list_value
cef_string_list_append
cef_string_map_size
cef_string_map_key
cef_string_map_value
cef_string_map_append
cef_string_multimap_size
cef_string_multimap_key
cef_string_multimap_value
cef_string_multimap_append
cef_string_multimap_alloc
cef_string_multimap_free
cef_enable_highdpi_support
cef_shutdown
cef_initialize
cef_execute_process
cef_register_extension
cef_post_task
cef_currently_on
cef_v8value_create_function
cef_v8value_create_object
cef_v8value_create_string
cef_v8value_create_date
cef_v8value_create_double
cef_v8value_create_int
cef_v8value_create_bool
cef_v8value_create_undefined
cef_string_list_free
cef_string_list_alloc
cef_process_message_create
cef_string_userfree_utf16_free
cef_log
cef_string_utf16_clear
cef_string_utf16_to_utf8
cef_string_utf8_to_utf16
cef_string_utf8_clear
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
cef_time_from_timet
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
cef_string_utf16_cmp
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
cef_string_utf16_set
RpcBindingFree
RpcStringFreeW
RpcStringBindingComposeW
RpcBindingFromStringBindingW
NdrClientCall2
Sleep
CreateThread
ReadFile
FindFirstFileW
FindNextFileW
WriteFile
FindClose
CreateFileW
GetFileAttributesW
DeleteFileW
GetFileSize
GetConsoleWindow
MoveFileW
SetLastError
FormatMessageA
CreateMutexA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetVersionExA
MultiByteToWideChar
GetModuleFileNameA
SetCurrentDirectoryW
LocalFree
GetEnvironmentVariableW
GetCurrentDirectoryW
CreateDirectoryW
GetFileTime
GetFullPathNameW
RemoveDirectoryW
SetEndOfFile
SetFilePointerEx
SetFileTime
DeviceIoControl
GetWindowsDirectoryW
CopyFileW
GetACP
CreateEventW
SetEvent
AreFileApisANSI
GetStdHandle
GetFileType
CreateFileA
GetFullPathNameA
SetFilePointer
GetModuleHandleW
SetThreadPriority
FindFirstFileA
FindNextFileA
GetFileAttributesA
FileTimeToLocalFileTime
SetFileAttributesA
GetVersion
GetVolumeInformationA
FileTimeToSystemTime
GetConsoleMode
SetConsoleMode
GetDriveTypeA
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetVolumeLabelA
SystemTimeToFileTime
GetLocaleInfoA
GetConsoleScreenBufferInfo
GetTickCount
GlobalMemoryStatus
lstrcmpiA
lstrcpynA
lstrlenA
RtlVirtualUnwind
FlushConsoleInputBuffer
FormatMessageW
GetSystemTimeAsFileTime
WaitForSingleObjectEx
GetModuleFileNameW
RtlCaptureContext
VirtualFree
VirtualAlloc
CreateProcessW
GetThreadPriority
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ResetEvent
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
CreatePipe
GetTempPathW
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
FreeLibrary
GetProcessHeap
HeapAlloc
UnlockFile
LockFileEx
GetFileSizeEx
FlushFileBuffers
SetEnvironmentVariableW
GetEnvironmentStringsW
LCMapStringW
RtlCaptureStackBackTrace
LoadLibraryW
RaiseException
HeapReAlloc
OutputDebugStringW
InitializeCriticalSectionEx
SetErrorMode
GetCommandLineW
LoadLibraryA
HeapFree
GetLastError
ReleaseMutex
WaitForSingleObject
CreateMutexW
VerifyVersionInfoW
VerSetConditionMask
GetProcAddress
GetUserGeoID
GetLocalTime
CloseHandle
OpenProcess
GetModuleHandleA
GetVersionExW
GetGeoInfoW
GetLongPathNameW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
LocalReAlloc
GetExitCodeProcess
FreeEnvironmentStringsW
SwitchToThread
LocalAlloc
LoadLibraryExW
DuplicateHandle
RemovePropW
SetPropW
GetMessageW
DispatchMessageW
TranslateMessage
GetWindowThreadProcessId
DefWindowProcW
GetKeyState
GetFocus
DestroyWindow
IsWindowVisible
SetWindowPos
LockSetForegroundWindow
ScreenToClient
CallNextHookEx
OemToCharA
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
CharToOemA
GetPropW
GetPropA
SetWindowLongPtrW
CallWindowProcW
SetPropA
RemovePropA
SendMessageW
PostMessageW
GetClassNameA
MonitorFromWindow
ReleaseDC
GetDC
ShowCursor
SetForegroundWindow
RegisterClassExA
FindWindowA
GetParent
PostQuitMessage
GetClientRect
ShowWindow
GetCursorInfo
AttachThreadInput
CreateWindowExA
SetFocus
SetParent
SetWindowsHookExW
GetDeviceCaps
GetSaveFileNameW
CommDlgExtendedError
GetOpenFileNameW
AdjustTokenPrivileges
GetUserNameW
SetKernelObjectSecurity
IsValidSid
IsValidSecurityDescriptor
IsValidAcl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetSecurityDescriptorControl
LookupPrivilegeValueA
GetKernelObjectSecurity
OpenProcessToken
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegOpenKeyExW
RegQueryValueExW
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
SHCreateItemFromParsingName
SHCreateDirectoryExW
SHBrowseForFolderW
CommandLineToArgvW
SHGetPathFromIDListW
SHGetMalloc
CoTaskMemFree
CoInitializeEx
CoCreateInstance
CoUninitialize
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_BADOFF@std@@3_JB
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Xbad_alloc@std@@YAXXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
PathCombineW
CredUnPackAuthenticationBufferW
CredUIPromptForWindowsCredentialsW
WSAStartup
WSACleanup
CertOpenSystemStoreA
CertFreeCertificateChain
CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateContext
CertCreateCertificateContext
CertGetCertificateChain
__vcrt_InitializeCriticalSectionEx
unexpected
__std_type_info_name
__RTDynamicCast
__RTtypeid
wcschr
wcsstr
strstr
_CxxThrowException
strchr
memset
memcpy
__std_type_info_compare
memchr
__std_terminate
_purecall
__std_exception_copy
memmove
__std_exception_destroy
__C_specific_handler
memcmp
__CxxFrameHandler3
_register_thread_local_exe_atexit_callback
_c_exit
_initterm_e
_initterm
signal
raise
_initialize_wide_environment
_configure_wide_argv
perror
exit
_set_app_type
_seh_filter_exe
_cexit
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_errno
_get_wide_winmain_command_line
_exit
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_beginthreadex
__sys_errlist
__sys_nerr
strerror
strtol
_strtoi64
strtoul
atoi
strtod
mbstowcs
strtof
atol
_strupr
_stricmp
iswspace
strncpy_s
isalnum
isdigit
isspace
_strnicmp
isxdigit
tolower
wcscat_s
strcmp
isalpha
strncmp
toupper
strncpy
isprint
isupper
mblen
strlen
strncat
_wfreopen
setvbuf
_open
fgetpos
fwrite
__stdio_common_vsprintf
__stdio_common_vfprintf
_get_osfhandle
_wfopen
__stdio_common_vswprintf
fclose
ferror
fflush
_set_fmode
__p__commode
_close
_read
_write
_getcwd
_isatty
putc
_get_stream_buffer_pointers
_mktemp
__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s
__acrt_iob_func
_lseeki64
fopen
_setmode
ftell
_fseeki64
fread
fseek
_fileno
fgets
__stdio_common_vsscanf
feof
fputc
fsetpos
ungetc
fputs
fgetc
_stat64i32
rename
_stat64
_wstat64i32
_wchmod
_unlock_file
_unlink
_mkdir
_chmod
_lock_file
malloc
_recalloc
calloc
free
_aligned_free
_aligned_malloc
_set_new_mode
realloc
_callnewh
_time64
_localtime64
_gmtime64
clock
_mktime64
_tzset
_difftime64
qsort
abs
div
srand
rand
_dsign
fmod
_dclass
log
_isnan
__setusermatherr
log10
pow
floor
logf
_putenv
getenv
setlocale
localeconv
_configthreadlocale
___mb_cur_max_func
_mbsinc
_mbclen
_mbsrchr
_mbschr
_getch
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ