Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
67028bd74b0e880da0b969bfb37c65a0_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
67028bd74b0e880da0b969bfb37c65a0_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
67028bd74b0e880da0b969bfb37c65a0_NeikiAnalytics.exe
Size
310KB
MD5
67028bd74b0e880da0b969bfb37c65a0
SHA1
350fdb4cde904d3cb6e4ae6422fc2b352ce03a79
SHA256
4f5c4a2b38558ae2f86d3ab221e39649069e044025ccf3a1531b490cd430594d
SHA512
20f27535180a6a6e5225f903fed88b5a7bac978524cdbfad19324cdda789fc6bc2473d3fa6b277c21992fd66bb96eebd440a276977753114a805169a0e4ccd54
SSDEEP
6144:QUg9e/LsQIRFosStm8IzBJJhsChVyhaxiLoVlquxzzubQbXt7Mnwy0SS07k:y9eTuFoftoW1G4k
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
fclose
_mbsnbcmp
fwrite
_mbslwr
_mbsicmp
atoi
_stricmp
strncpy
mktime
memcpy
swprintf
wcslen
memmove
_beginthreadex
_except_handler3
_vsnprintf
fopen
_purecall
_mbsrchr
strcat
sprintf
localtime
gmtime
_mbsnbcpy
memset
time
srand
rand
strcpy
div
strlen
__CxxFrameHandler
??2@YAPAXI@Z
_mbsnbicmp
printf
strtoul
fread
ftell
fseek
_i64toa
_ultoa
_atoi64
strtod
memcmp
_mbctolower
_mbctoupper
malloc
_ismbcdigit
_mbsinc
_mbclen
_mbscmp
??1type_info@@UAE@XZ
_ftol
_mbsstr
fflush
free
__dllonexit
_onexit
?terminate@@YAXXZ
_initterm
_adjust_fdiv
_snprintf
_CxxThrowException
UuidToStringA
RpcStringFreeA
GetModuleFileNameExA
EnumProcessModules
GetMappedFileNameA
GetProcessMemoryInfo
CommandLineToArgvW
ShellExecuteA
ShellExecuteExA
CreateEnvironmentBlock
DestroyEnvironmentBlock
SHDeleteKeyA
CreateProcessAsUserA
RegEnumValueA
RegQueryInfoKeyA
RegQueryValueExW
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
DuplicateTokenEx
SetTokenInformation
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
GetTokenInformation
LookupAccountSidA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegNotifyChangeKeyValue
RegDeleteKeyA
RegDeleteValueA
RegFlushKey
RegCreateKeyExA
ImpersonateLoggedOnUser
RevertToSelf
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegEnumKeyExA
WTSFreeMemory
WTSEnumerateSessionsA
WTSQuerySessionInformationA
NetApiBufferFree
NetUnjoinDomain
NetRenameMachineInDomain
NetJoinDomain
NetLocalGroupEnum
NetQueryDisplayInformation
NetGetJoinInformation
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoCreateGuid
CoCreateInstance
CoSetProxyBlanket
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
CopyFileExA
GetFileSize
SetEndOfFile
FlushFileBuffers
SetFilePointer
GetOverlappedResult
WriteFileEx
WriteFile
ReadFileEx
ReadFile
CreateFileA
SetTimeZoneInformation
GetTimeZoneInformation
QueryPerformanceFrequency
QueryPerformanceCounter
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
SetSystemTime
GetSystemTime
GetTickCount
GetModuleFileNameA
LoadLibraryA
GetProcAddress
OutputDebugStringA
GetLastError
FreeLibrary
ReleaseMutex
CloseHandle
CreateMutexA
WaitForSingleObject
WaitForSingleObjectEx
TerminateProcess
SetLastError
lstrlenA
MoveFileExA
GetCommandLineW
GetCurrentProcessId
WaitNamedPipeW
CreateFileW
LoadLibraryW
lstrcatW
GetSystemDirectoryW
MultiByteToWideChar
GetProcessTimes
FileTimeToLocalFileTime
GetCommandLineA
ReadProcessMemory
Process32Next
Process32First
CreateToolhelp32Snapshot
WideCharToMultiByte
HeapFree
HeapAlloc
MoveFileA
DeleteFileA
SetFileAttributesA
RemoveDirectoryA
CreateDirectoryA
GetFileAttributesA
GetTempPathA
GetSystemDirectoryA
GetSystemWindowsDirectoryA
GetTempFileNameA
LocalFree
lstrlenW
IsBadWritePtr
GetSystemInfo
GlobalMemoryStatusEx
GetVersionExA
GetSystemDefaultLangID
GetSystemDefaultLCID
SetComputerNameExA
GetComputerNameExA
SetComputerNameA
GetComputerNameA
GetModuleHandleA
InterlockedDecrement
GetProcessHeap
UnmapViewOfFile
GetCurrentProcess
GetExitCodeProcess
MapViewOfFile
CreateFileMappingW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
SuspendThread
SetEvent
Sleep
lstrcpynA
GetCurrentThreadId
WritePrivateProfileStringA
GetEnvironmentVariableA
OpenProcess
CreateProcessA
GlobalFree
GetSystemMetrics
SetErrorInfo
CreateErrorInfo
VariantChangeType
VariantCopy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SysAllocString
SysFreeString
GetErrorInfo
SafeArrayAccessData
VariantClear
SafeArrayUnaccessData
VariantInit
GenEngineName
IospcAddAccreditNo
IospcChangeSingleNode
IospcCheckAccreditNo
IospcGetExpireDays
IospcGetMgmCounts
IospcGetMidIntValue
IospcGetObjectData
IospcGetProductlines
IospcGetSingleEngineIp
IospcGetValue
IospcGetValueInEstring
IospcGetValueTask
IospcOnOffEngineTime
IospcSetGeneralSetupFlag
IospcUpdateCfg
IospcUpdateCfgDataForInt
IospcUpdateCfgInEstring
IospcUpdateExpireDays
IospcUpdateInitCfgTask
IospcUpdateMgmCounts
IospcUpdateWebLanuData
PNPDllFini
PNPDllInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ