Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
af0985666a8545142748d08a76379520_NeikiAnalytics.exe
Resource
win7-20240221-en
Target
af0985666a8545142748d08a76379520_NeikiAnalytics.exe
Size
650KB
MD5
af0985666a8545142748d08a76379520
SHA1
dc3a9bdc5a4850009772692b07b135d25948befa
SHA256
c688a6b539911bb46727226aeab06fc09a462696e8c1155eb0fe936ad9bdb7bf
SHA512
a6dcb75862b8048da580a2ed778211fd0881259928c6db8e530feccd71a48af9f6461a688e1722ce31c176621ff372fe82930712db31127d04f822debdd0f7d0
SSDEEP
12288:gHtGkI/vIE8FKsvWJJ0TVpXX9zIX/jfbN8hG5iKSaLDiswY63fKUPEm1:gHQkDIjG6X/jfJ8+LSMr6PKzg
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadLibraryA
ExitProcess
GetProcAddress
VirtualProtect
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
��OS ֜��E%�9��Lݐ%�5����0�9"ژ��Z'�G�>����w���ׅJ\�{�ϸ����R�&S��9��=��`)������e�)�٢��-ɶ<���N���_��/;!i~"�v��b�bYO)qM�ʛH�Y���͓��L|��Hp�7!��_�X��oT���hc���ii�������*�qo�ڛ�-��t��o^�;�E�xl��ˑ�#}Tr�H�u���.����~���&y�ܫ4R�P�<�e�T�Ga((��< (���q����g�)�Khߖ&���w����S1�Ɠ�����ǩ(�p-��If���l�]E�ۋ�}h�H�:o U��5B@��kLu�`>��˱�� 5 ����R�;�v$цU�0PL�j&�q�p��;1C��a���,���\aG _�t��6_��oS���T����MQ�D�}D�F��3�^�W��1��-���B!����QcD�%TC�/�~u wP�փ�E�$�w�1@�4�����Dlu%Y�R�����&����R��E�8J_U���e����!~U�A�`!�N���i����*D�N�]�'RK{oo�����/����(s����_�p�郩{���i�J&,��M!��(jpn+����U�\� ��>�ˬ�pLBWM��s=��a#�9A �kR�S�$�n�Ǔ�֭����2��~u�e�w����wAlo��^�-҄Y)|���U�%���� ����qd��Ѣ�����3��fAb�挦�۬��SOWJ7���͗���{�|uL~�J ï�L�����W�lC����Cb��rI��=e����M�j,W�;���Tq{�k�2��J�w�I�(`�-���Gǯ�.��4�d���� �q���d_`�el���8q�rO�R�!��K6,1j��{����2w��D�w�V�0��s�`I�c=�� P5�r%�����ê�hȊ����CqP���1�a�mX�����##�V�6�� &Eq�)[ �e�� ��Z�4�)�����9U_��g��\c�4SE:!�i^z'�,߸Vy�mfpJ�no6���=����M��\�1�ϕ���Wk�!�4�y�6���7���K���w�:u��U�O���jO�. ;����ZZj5Ȧ@������O�%��L�h�� b��a�p�*w����>�wE�{c�2�-�30y�p����8s_�4h<gS�h*#�3`Μ�ca��߁~���<��hO��2dja&�>ŀ9Gdc���:���&�t�8���7��<R��%�z�N��e'h� �r��rnD�!�S�X���:�B~�ȯd���[�#���SB�o����K]wC���]:���P�V4\��Sec(��W��� �2�^X����v�s�.��x�-�I����V)9ق�x��r���_]��L =�n�J,9�{'.�ǽ�Q�0�K\�"T���c�ԇ�^Ns^�ps!��f2��� &2�� A� �����q5��)&}�v��x���.��Fv�O1oE�a��~�"�3�� ��Iq��{o����k����$��|R� ��)\Bp�&���aգ��ٞf���ld� �^Y��� �C|%I�H+�?���xZ����ȋ ��-o)�L��U I�nc�c��. ���Ly��9sQVT���T�7���䦾��Ka��Pk�o�,��~�JW�-w�ŝ>�2�����E<%ǁ5j~'n��t�����.�x����}��r}>ۊ�D�t�g��$���϶�$����hW�N�@2HÎө>h�hzr�3���Կ�/��a<�ޭv�͊�`��Ĉ.r��(�F��ȸW�>mkwڙ�%2?��T��<!�s?�a�-��dž/9\�����:E[#�I����?W��7�b'��>���0&��n��7mv ���F�������<n�Ѐ�8�M��-��3���AI�2�MC* ��r+��%��(6�*�Q]�Î�N��f�S���8?FO���ɰ�ܸ�:W���Q~������e���O�\[O�������� +�h��ǤΫ��MT����B�5%Y� s95�Y����6�,ZΥ�yS��8����-���l�n�7A���E�94��p�X_|P.I���,�KR�1�1���Z̥O���ffE�g��sk��u!����Es�^+���w/��ϡ�T�����i�C*�U��G/b��By�2~c���x� Ƿ���R�����躺�rf�*�[l���F,�I`�Bu��Ce|�M�?�GB7�?f����f���}���D���Ʌ��1�ź�Ț�����B�ӗ<4��G���h�-Dp�ѹ����IP��2�2�-L�U�j��+G��aЦv%M@1ʔ 2����6�t8<Y�����ϰ�����."-H�Q2��}����\�8�˅B��$LR����������I�R"�����0��A�h�!����\�H�j������i���G� ;Eu�3^O#k*�)R1M���������Y*wS��!��B`�+ pߜ��;�~l�4S���Yላ�(&5i�@�9��� q�����1�����e�V�T:���ޫ��Y~1@�q���YHX�u�&��v��VF.2��e���_�4,�;>W�/`�l�m���)��pќ��R |c0iRĐ�c��.d��疰L[r'�[�-�����.GȱWZ�e\ء!5�7 G��z���,z�j�M�����<+9e���i�v��@��\�4��*�-��^�+_m�j�q�(�w|�YҢٺ[0�!���2�����B��i0f��ږo�Rf��N/��ӿn#�zA�3�N�$��;*Rn���wC�Jd-P`Gխ`N_i�_���n8Ӧ �i�ٔ�.����Q`������T�<� �����5���v�0��]B0 ��ܜ:��qb��2��:L� �u�67�=z76���g���F�Η��9Z����U�3P�Ә�t~#�&���R�M�t�mf������ |��U"އ|'�f�B1*��)��Žgr��������ڮ�
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ