Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
eeb125d504a8df6ede3a1fad02ccb5b0_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
eeb125d504a8df6ede3a1fad02ccb5b0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
eeb125d504a8df6ede3a1fad02ccb5b0_NeikiAnalytics.exe
Size
41KB
MD5
eeb125d504a8df6ede3a1fad02ccb5b0
SHA1
e7a2ac0a4e85aa04f2b2fe8a0123da2ee709f994
SHA256
b8f8045075b245159866599a8a54f7b1b6555ae09a36f55660d99c958dfe42e7
SHA512
a06f53da70fbda3868b1e0b84ffa8b3480e102df43607e0e1e88ab1a99633485f89f17077d48037a7991598b1ee513c169e826027d84761e8e9135a748229e5a
SSDEEP
768:36ghRZeaG9al0cO5rJk5M5Bwdc6k62g/o1ud+d3e63A7:3cs45rJNwdJkmo1jd3e6w7
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\build.tc\agent\work\16651e9a97b53675\gf_joinme_apps\build\jmsettings.pdb
CryptProtectData
CryptUnprotectData
WSAStartup
gethostbyname
WSACleanup
GetAdaptersAddresses
GlobalMemoryStatusEx
GlobalMemoryStatus
lstrlenW
GetComputerNameW
SetLastError
CloseHandle
DeviceIoControl
CreateFileW
VerifyVersionInfoW
VerSetConditionMask
GetLastError
LocalFree
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
UnhandledExceptionFilter
IsValidSid
GetSidSubAuthorityCount
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
LookupAccountNameW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CryptGetHashParam
CryptHashData
CryptDestroyHash
CryptCreateHash
CryptReleaseContext
CryptAcquireContextW
GetSidSubAuthority
GetSidIdentifierAuthority
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?_BADOFF@std@@3_JB
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
memcpy
__CxxFrameHandler3
__std_type_info_destroy_list
__std_terminate
memmove
_except_handler4_common
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
__stdio_common_vswprintf_s
__acrt_iob_func
__stdio_common_vfwprintf
free
realloc
_callnewh
malloc
_execute_onexit_table
_initterm_e
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_crt_atexit
_cexit
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_initterm
JMSFreeComputerID
JMSFreeSettingValue
JMSGetComputerID
JMSGetComputerIDv2
JMSHasSecureSetting
JMSLoadPersistentSetting
JMSLoadSecureSetting
JMSRemoveDomain
JMSRemoveValue
JMSSavePersistentSetting
JMSSaveSecureSetting
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ