Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
bcdd37f9259ebccc2bf9f6e8f0afb650_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bcdd37f9259ebccc2bf9f6e8f0afb650_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
Target
bcdd37f9259ebccc2bf9f6e8f0afb650_NeikiAnalytics.exe
Size
120KB
MD5
bcdd37f9259ebccc2bf9f6e8f0afb650
SHA1
f79dd45a9dc9ac6036b01c350e991ae2f84aabd4
SHA256
28516e9d1aa8ac252e1dc782bb3e2c58699dc60a892ada2316384ac4673a8718
SHA512
e3ba70fb9889bd5eee32b3c2518014f6a61303e74b51d245493f719514132588cb5769d6b6a1464519c056cbd63bd2471672636c5c6f083af6415bf925924f6e
SSDEEP
3072:AEV3EFZskKIP+b6HAryDTXTYSa1BOtlrqyFr:AEmKIP++AQTXTYhBOtlTFr
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
d:\WaterBox90\WaterBox9\Src\Client\SecDoc\pdb\SpSdInst.pdb
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
FindResourceW
FindResourceExW
WaitForSingleObject
GetVersionExW
GetCurrentProcessId
ProcessIdToSessionId
Sleep
RemoveDirectoryW
FindFirstFileW
FindNextFileW
FindClose
SetFileAttributesW
GetTempFileNameW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
SizeofResource
CopyFileW
TerminateProcess
OutputDebugStringW
CreateProcessW
GetExitCodeProcess
GetTickCount
LoadLibraryExW
SetFilePointer
WriteFile
CreateFileW
GetLocalTime
GetFileAttributesExW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
CloseHandle
GetCurrentProcess
DisableThreadLibraryCalls
GetModuleHandleW
SetLastError
CreateDirectoryW
GetFileAttributesW
GetTempPathW
DeleteFileW
MoveFileExW
LoadLibraryW
IsDebuggerPresent
FreeLibrary
GetProcAddress
GetLastError
GetSystemDirectoryW
GetWindowsDirectoryW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrlenW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedExchange
QueryPerformanceCounter
GetCurrentThreadId
InterlockedCompareExchange
HeapDestroy
CreateServiceW
ChangeServiceConfig2W
DeleteService
ControlService
QueryServiceStatus
CloseServiceHandle
OpenSCManagerW
QueryServiceConfigW
EnumServicesStatusW
OpenServiceW
RegFlushKey
RegQueryValueExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegCloseKey
RegDeleteKeyW
CreateProcessAsUserW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
PathFileExistsW
_vsnwprintf_s
_wcsnicmp
??_V@YAXPAX@Z
_wcsicmp
_localtime64_s
_time64
wcsftime
memmove
swprintf_s
_memicmp
wcschr
towlower
wcspbrk
iswspace
wcsncmp
free
memset
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
_purecall
_wtol
_vsnwprintf
memmove_s
memcpy_s
??3@YAXPAX@Z
memcpy
__CxxFrameHandler3
_CxxThrowException
_invalid_parameter_noinfo
CBoxConfig
CefsTdiConfig
GetErrorMessage
ImNdisInstall
ProcessClean
SDocConfExCfg
SDocDrvCfg
SDocKeyOcxCfg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ