Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4562b7c51b68ed39306e4d7d2f9fef50_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4562b7c51b68ed39306e4d7d2f9fef50_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Target
4562b7c51b68ed39306e4d7d2f9fef50_NeikiAnalytics.exe
Size
125KB
MD5
4562b7c51b68ed39306e4d7d2f9fef50
SHA1
bea3c9e149bbdeef048dc2271197eb0a819f4833
SHA256
68011b32abc45f7edb3d5a8d587333c489589b86ddb2149dc5b08123864d7cee
SHA512
70350e577175402d97ec7713d7c620aacd747f3ed64e8a1b96775d9b0d8a71c76a2e7f537ed384b0cc9df102cd9fc082479d405c775ecae8eaab6be974ec0a50
SSDEEP
1536:AG8wZI6EwlaeQ/WEemdeCO1EE4fkvirArbulD6SewVLlZMx3USJC7Idd7J6x8:DZI6EAQORxCO1EE4fKNrA698xKBUSGih
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
e:\svnhome\shield6_build\trunk\Release\Win32\ShdTray.pdb
ord6802
ord1641
ord2368
ord2375
ord2630
ord2612
ord2610
ord2628
ord2640
ord2617
ord2633
ord2638
ord5625
ord2139
ord1792
ord1791
ord1727
ord5650
ord2771
ord2983
ord3112
ord4728
ord2966
ord3140
ord2774
ord5324
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4910
ord4664
ord2537
ord2621
ord2623
ord2625
ord2619
ord2635
ord2615
ord971
ord967
ord969
ord965
ord960
ord5683
ord5685
ord6466
ord1728
ord4702
ord6579
ord6577
ord5154
ord3743
ord1254
ord1272
ord1250
ord1248
ord6808
ord6275
ord2904
ord6635
ord2360
ord2364
ord2069
ord5008
ord1354
ord4774
ord367
ord636
ord524
ord744
ord1353
ord1868
ord4543
ord4131
ord2539
ord3515
ord4174
ord1492
ord6408
ord3353
ord1675
ord1809
ord1810
ord2208
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord3115
ord3285
ord4905
ord3670
ord2447
ord6604
ord1098
ord4211
ord1108
ord589
ord794
ord938
ord6697
ord3674
ord6091
ord6527
ord3486
ord6666
ord1220
ord1357
ord1063
ord1088
ord2130
ord686
ord436
ord4044
ord3537
ord3543
ord2106
ord1183
ord3488
ord595
ord797
ord4681
ord5664
ord1493
ord6411
ord3355
ord813
ord1137
ord316
ord601
ord6687
ord5632
ord6804
ord3682
ord5404
ord6376
ord3226
ord4682
ord1442
ord4603
ord6800
ord5512
ord2074
ord5602
ord4345
ord1751
ord1754
ord600
ord296
ord801
__CxxFrameHandler3
_crt_debugger_hook
memset
?_type_info_dtor_internal_method@type_info@@QAEXXZ
memcpy
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
vsprintf_s
_vscprintf
malloc
_beginthreadex
free
memmove_s
memcpy_s
LockResource
SizeofResource
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
LoadResource
UnhandledExceptionFilter
IsDebuggerPresent
FindResourceW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
CreateMutexW
GlobalUnlock
GlobalLock
WTSGetActiveConsoleSessionId
WaitForMultipleObjects
GetTickCount
CreateEventW
ProcessIdToSessionId
GetCurrentProcessId
SetLastError
LoadLibraryW
GetLastError
GetProcAddress
GetModuleHandleW
WaitForSingleObject
SetEvent
CloseHandle
FindResourceExW
CreatePopupMenu
SendMessageTimeoutW
GetLastInputInfo
SetForegroundWindow
GetCursorPos
UnregisterHotKey
RegisterHotKey
DefWindowProcW
EnableMenuItem
PostMessageW
LoadIconW
GetKeyState
SetWindowsHookExW
GetWindowRect
FillRect
GetClientRect
UnhookWindowsHookEx
SetWindowPos
GetSystemMetrics
KillTimer
SetTimer
SendMessageW
EnableWindow
StretchBlt
CreateCompatibleBitmap
CreateDCW
BitBlt
SelectObject
CreateCompatibleDC
CreateSolidBrush
GetObjectW
GetStockObject
RegCloseKey
AbortSystemShutdownW
RegOpenKeyExW
RegNotifyChangeKeyValue
ShellExecuteW
InitCommonControlsEx
CreateStreamOnHGlobal
CoTaskMemFree
GetHGlobalFromStream
?ShdShowPreInstanceWnd@@YAHPB_W0@Z
?GetChildData@CXmlElem@@QAEPB_WPB_WH@Z
??0CShdDump@@QAE@H@Z
?Digest@CShdMd5@@QAEXPBEIPAE@Z
??0CShdMd5@@QAE@XZ
?GetChild@CXmlElem@@QAEPAV1@PB_W@Z
?ShdExitWindows@@YAHH@Z
?ShdDestroyShutdownBlockReason@@YAHPAUHWND__@@@Z
?ShdEnablePrivilege@@YAHPB_WH@Z
?ShdCreateShutdownBlockReason@@YAHPAUHWND__@@PB_W@Z
?ShdTrace@@YAXKKPB_W0K0ZZ
?ReplaceEntityChar@CShdXml@@SAAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@AAV23@@Z
?WStrToUTF8@@YA?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PB_W@Z
?UTF8ToWStr@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PBD@Z
?g_AppPath@@3V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@A
?ShdGetInfo@@YAJKPAXK@Z
?ShdIsUninstalled@@YAHXZ
?ShdGetString@@YAPB_WPB_W@Z
?ShdClose@@YAJXZ
?ShdOpen@@YAJXZ
?ShdIsAccessCtrlEnabled@@YAHXZ
?ShdInitLang@@YAPAVCXmlElem@@PB_W000@Z
?ShdFormatTime@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABU_SHDTIME@@@Z
?ShdGetAllInfo@@YAPAXKKAAKK@Z
?ShdExecTask@@YAHK@Z
?ShdIsDemoExpired@@YAHXZ
?ShdRegisterNotify@@YAJPAUIShdNotify@@@Z
?ShdGetWorkModeState@@YAKPAK@Z
?ShdSetInfo@@YAJKPBXK@Z
?ShdHookKeyboard@@YAJK@Z
?ShdFormatMsg@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@J@Z
??1CShdTray@@UAE@XZ
??0CShdTray@@QAE@XZ
??0CShdBtn@@QAE@XZ
??0CShdBmp@@QAE@XZ
??0CCheckBox@@QAE@XZ
??1CShdBmp@@UAE@XZ
??0CProgressBar@@QAE@XZ
??1CProgressBar@@UAE@XZ
??1CShdDialog@@UAE@XZ
??0CShdMenu@@QAE@XZ
?PreTranslateMessage@CShdBaseDlg@@MAEHPAUtagMSG@@@Z
?ShdMoveCtrls@@YAXPAVCWnd@@IIHH@Z
?ShdGetCtrlRect@@YAHPAVCWnd@@IAAVCRect@@@Z
?Load@CShdBmp@@QAEHPAUHINSTANCE__@@IPB_W@Z
?GetThisMessageMap@CShdBaseDlg@@KGPBUAFX_MSGMAP@@XZ
?OnOK@CShdDialog@@MAEXXZ
?SetDlgLang@CShdBaseDlg@@IAEXPB_W0H@Z
?OnDestroy@CShdDialog@@IAEXXZ
?SetPos@CProgressBar@@QAEHH@Z
?GetThisMessageMap@CShdDialog@@KGPBUAFX_MSGMAP@@XZ
?DisableClose@CShdDialog@@IAEXH@Z
?OnInitDialog@CShdDialog@@MAEHXZ
??0CShdDialog@@QAE@IPAVCWnd@@H@Z
?ShdMsgBox@@YAIIKPB_WZZ
?ShdMsgBox@@YAIPB_WIKPAVCWnd@@@Z
??0CWaitingDlg@@QAE@PB_WP6AJPAV0@PAX@Z2H@Z
?DoModal@CWaitingDlg@@UAEHXZ
?SetMenuItem@CShdMenu@@QAEHIPB_WIIH@Z
?ShowIcon@CShdTray@@QAEHH@Z
?InsertMenuEx@CShdMenu@@QAEHIIIPB_WI@Z
?SetImageList@CShdMenu@@QAEHPAU_IMAGELIST@@H@Z
?SetMenuBrush@CShdMenu@@QAEHXZ
?ShdCreateImageList@@YAHAAVCImageList@@IPAUHINSTANCE__@@KPAI@Z
?Create@CShdTray@@QAEHHPAUHWND__@@PAUHICON__@@PB_W@Z
?ShdGetImageEncoder@@YAHPB_WAAU_GUID@@@Z
?Create@CDesktopTip@@QAEHXZ
?ShdInstalledFirstRunDlg@@YAXXZ
?ShdAboutDlg@@YAXH@Z
?SetTipText@CDesktopTip@@QAEXPB_W@Z
?SetTip@CShdTray@@QAEHPB_W@Z
?ShdLogonDlg@@YAHXZ
?GetMessageMap@CShdDialog@@MBEPBUAFX_MSGMAP@@XZ
??1CWaitingDlg@@UAE@XZ
??1CDesktopTip@@UAE@XZ
??0CDesktopTip@@QAE@XZ
??1CShdMenu@@UAE@XZ
??1CCheckBox@@UAE@XZ
??1CShdBtn@@UAE@XZ
??1CShdBaseDlg@@UAE@XZ
?OnCancel@CShdBaseDlg@@MAEXXZ
?OnOK@CShdBaseDlg@@MAEXXZ
??0CShdBaseDlg@@QAE@IPAVCWnd@@@Z
??1CFlatEditEx@@UAE@XZ
??1CFlatEdit@@UAE@XZ
??0CFlatEdit@@QAE@XZ
?ShdSetAppIcon@@YAHPAUHICON__@@H@Z
??0CFlatEditEx@@QAE@XZ
?ShdExpireTipDlg@@YAXXZ
?OnCancel@CShdDialog@@MAEXXZ
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipFree
GdipCreateBitmapFromHBITMAP
GdipSaveImageToStream
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ