Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
6721432033661b337041db74c4e83ab0_NeikiAnalytics.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6721432033661b337041db74c4e83ab0_NeikiAnalytics.exe
Resource
win10v2004-20240226-en
Target
6721432033661b337041db74c4e83ab0_NeikiAnalytics.exe
Size
9.3MB
MD5
6721432033661b337041db74c4e83ab0
SHA1
81d74cdc2e70bec7f04b973b166be416e93b8378
SHA256
520802f22a20cf0d6da73cd35aae6154ffdc41089875f06e6ac37405d3fdefee
SHA512
e8af16ad7b520965f091b569b1b8006064711df6975295b8509678911faa46e27c4a1f2d029f3318138c7fec71fce85bbc1657f6fd84aafbe8c48818f9caf0ef
SSDEEP
196608:el+EmLnF1JKSWhBNMfFOK2rc8y9NeJ2v52etpArNsyHukVz3J48Lh:vjLnvJshfFK2rc9yJ2h2CANaY3JD
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
luaL_newstate
HTMLayoutSelectElementsW
GetFileVersionInfoSizeA
ShowCaret
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
sqlite3_open
sslRead
hashAlgData
PlaySoundA
GetVersionExA
GetVersion
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
Rectangle
GetOpenFileNameA
OpenPrinterA
RegSetValueA
SHGetSpecialFolderPathA
ord17
ord8
CoCreateGuid
ord251
VariantInit
recv
InternetQueryDataAvailable
GetAdaptersInfo
WTSSendMessageW
ƎC�;_+�Q�B-�iC��ǝ��pc�OsQ��� ʦ\ �͏3�y�|�GtK�E�;0q�8�Ax_'�s�LP�k7����C�6dWԫ ����k�]*�=����R-@ɖ��S�e�M���(��j�N�RP��'Yѓ�?��E��]��"<+�����y�0������hY�y>Fy�-�<���A[��47��OG�!C���v8�l+<l�3؛ b`EߺA�WvB��S��S���'-[�|mA9�������T�~�л��_���./moQ�d�5�?$J%��i!�����1n���H�1qa��z�P��t��C9?lo�S�2j92��TS�3�i�����5�!��M��1��^Z*S��^��s7'IuG�&���|�=~) �\��o3Q � ��̵�#�i7Q�WV���7��6yGK�)/R�&���f8���,��ib]�py����<��YJ��7h�Ϭn�0�Y��K&���F$Z��;��Y��j����{�r|]B��\.�;Qs��H[�O"�L�*���a |3�O�_מ�Cv�V����{�!�!��\�O�����N@ �"=[w��\nA��_bf?�Y�H��N|�/�߲���*2.���A��_z��gY�bX�0�.�|�P�W����uT��r���2p6qj��L��G6C��t�N��u�˝X��o�V~rd� ɝz�7��}h���m����`Ԙ��"ZĵەZ��w�eɚ.�xY�������b����b�o�%�X��9o��Oj���ⷣZd������eezSJ~/�����1�<C�>K_���\C��É��� ��ѷ'�J�K5����gh_�b)v\�`���4��PCo���&ZCT[���3�jc�Dˑ:���vz��G�]�~̸�H$�cTi��J�I�.Z����k�-�@Eh=:r*����K�,R��� �q3����D���є�L�"d��&n�*������f��Q���u�P>TӜ�ܑ��� ���+�?��ЫfJ��l���qx0�K�|k�ޒ։�G&���������m�%��<R�����Ex��#<*o'��u�}�����{)"���˦�G@�/YP�O�P��{+X�g:r�qF�9rT��9���L����څ}���1�+�x���&��sιD��h%����rx~BYW`�ˋ?>��1���\N����B�D{��1?b���1��; �<�6����ߵ��sG~l�����S����h+�{5o�4�j�rFV��b]����*�i�`�⌗=�1�9���������0���>�]е�gkP�����|u��H�$+���9���@���k@���B.��$�E~;��ݦ�Ii^�9^/��4����!s�s�ג�AI������Ob�S�5�|do��[��x���5l��-yB#HP���V��H�N�q1v���[^�Wɫ��JQ:�L��G[�<E;lz8t��3��j,�Iv�D(���2�ई���D%�r+�9@�o恘����8#B�\M�ޜ`��4�Jƿ&z�j�~�q��8��B��&����1@r�«�"�##���8��d�D�ê[���T[C��5�B� ͤ�Y�:4�fJE�/_�-����)��:�9����6�QFX�����6�:�J��)bp2�t�7+�Y�x ~��M�$�3s0}�B���7y����bc@�]v�.��t8�)�m]���<����Q�G����v����!��r�>�v�P��!�����a"�4 �懹��r*�IV��@�V�f05��E�аH>�!�y�Y��_���2u8��y�p�$��3�ol%�ES�ۢ���"�� ��-���W� :A��8g�̥4�i�f��l�ޱq�}��'�F;�>��Z�uρWN����H;lb�o�ްO�1^�V���M2�i�e�K�$��}NJa1!�b{s^?�]�b�k�6!D�^Ma}^,��\:2�^a��*R�̚��S�M�fYUP��B��7?�.���+�+���x��2$4�Y��8���y1�}���d��2�&��2��_���S���+vD�&���7��]"�Ͻ��`ż�o`6�K����%�%8���yꠌic%]̾T��bL�pA��y�hâ墟(���?mSN"� ��kH�J~���ryD��*���E�rv9���c쓌z C�S�Z�<�6�s�1�=�AK���5-G�YF>O`te+y�����w����l�l1}�*�G�`~�Tѐ2}��u<u�`��-BxK.u �u����A�0�" X�Ub����WV��I�R�+��6��wG~dUP��ÔH*�������:�WF�� ���v�����(2DčT���<�{ڌ�텞��77f��Lr�v���=�f��ϽZ}X1dg��A�mN��Qdi��ӓ��;'b>��3p���j������G�o69{#��H��:p��q�v��?��Pn�oʳd�cj��R+��@���+e�۰�����0yn�E��#0������@����0ɂ���Y��@���a���>��e!���M��H�����<�!�3�&fAY��O�/\r��Ghs2-G�@�Ǿ;K�G�,�*��q��qWE��YW.H�7_�IK)�{��*Ӵj7�6���0���0,$F���H�Zۘ�sj�����я��B�i?�۾�8qW��(�������q��D��w�aL![P�B�9��T4LY����p������H�����Pe�z�O�r��m<[��,�Y% 4#�a�0��;c��i�=N1��*Q�Xq�f�����9O۫�D����3�:����\�*��h���?�(2��˳z�� �Ze������9�A'���ߘc�϶���i� �y7]E�<A܃c���<5��5<�տ��n����H����W<G�A��Z+ެ:З��8����@��'e�9E������h�].O{��L�I��'��?�<�f��\7#�W��A�.�x�؞ZT�D�& v�[P��}B�+wq���/n1%����7�C�����_ݎA�������y��Ѧ���)�I�F�P�f�������
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ