Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4031141253ca57c54e934ba95a906e90_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4031141253ca57c54e934ba95a906e90_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
4031141253ca57c54e934ba95a906e90_NeikiAnalytics.exe
Size
233KB
MD5
4031141253ca57c54e934ba95a906e90
SHA1
34c3ee14e87ceab998b778a5b604f5c2a455967c
SHA256
d9d192a63c38eb4f6c620fb7bad9954eb67e2f59f0e2ffd8e2453dd92f369fad
SHA512
eb04aa667f8f6967ebfd7cc3fea4a47770e25d7575ee692aa56a654076e8f62fe9f13ec88af357d3de51f6aeb5e990f4738cde260c467ed1c7aa88a50aa1efba
SSDEEP
6144:nXLNsNlVU04/7n9pOOToJBV+UdvrEFp7hKb:XLq3QT+BjvrEH70
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
t:\msocf\x86\ship\0\msocf.pdb
FormatMessageW
GetLastError
TlsAlloc
Sleep
MulDiv
RaiseException
CloseHandle
GetCurrentThreadId
WaitForSingleObject
TlsSetValue
FormatMessageA
GetSystemDirectoryW
LoadLibraryExW
LoadLibraryW
OpenFileMappingW
CreateFileMappingW
CreateMutexW
MapViewOfFile
UnmapViewOfFile
ReleaseMutex
TlsGetValue
TlsFree
LoadLibraryA
FreeLibrary
LocalFree
LocalAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
VirtualProtect
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcessHeap
GetProcAddress
GetModuleHandleW
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
_crt_debugger_hook
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
free
_encoded_null
_malloc_crt
_encode_pointer
memmove
memset
memcpy
_vscwprintf
vswprintf_s
_CxxThrowException
__CxxFrameHandler3
__clean_type_info_names_internal
CreateBindCtx
StringFromGUID2
CoRegisterMessageFilter
??0CToolbarData@MsoCF@@QAE@XZ
??0CWindow@MsoCF@@QAE@XZ
??1CToolbarData@MsoCF@@QAE@XZ
??1CWindow@MsoCF@@UAE@XZ
?AppendArrayOfCharactersToWz@Strings@MsoCF@@YGXPB_WHAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@PAH@Z
?ClonePropertySet_Imp@IPropertySet@MsoCF@@UAGXPAPAU12@@Z
?CopyWzToWz@Strings@MsoCF@@YGXPB_WAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@PAH@Z
?Copy_MakeDeep_ComplexType@CPropertyData@MsoCF@@SGXQAXW4PropertyType@2@@Z
?Create@CWindow@MsoCF@@QAGXPB_W0KKHHIIPAUHWND__@@PAUHINSTANCE__@@@Z
?CreateActionManager@MsoCF@@YGXPAPAUIActionManager@1@@Z
?CreatePropertySet@MsoCF@@YGXPAPAUIPropertySet@1@PAU21@@Z
?CreateTheApp@Frame@MsoCF@@YGXAAUCreateTheAppArgs@12@@Z
?DebugWipe@Memory@MsoCF@@YGXPAXHH@Z
?Destroy@CWindow@MsoCF@@QAGXXZ
?DisablePropertiesTypeSafety@MsoCF@@YGXXZ
?FGet@Properties@MsoCF@@YG_NPAUIPropertySet@2@PBUPropertyInfo@2@PAXHW4PropertyType@2@@Z
?Finish@Frame@MsoCF@@YGXXZ
?Finish@Utilities@MsoCF@@YGXXZ
?Free@Allocator@Memory@MsoCF@@YGXPAX@Z
?FreeAndZero_ComplexType@CPropertyData@MsoCF@@SGXPAXW4PropertyType@2@@Z
?Get@Properties@MsoCF@@YGXPAUIPropertySet@2@PBIPAVCPropertyValue@2@H@Z
?GetMsoHinst@MsoCF@@YGPAUHINSTANCE__@@XZ
?GetProperty@IPropertySet@MsoCF@@QAGXABUPropertyInfo@2@PAVCPropertyValue@2@@Z
?Init@CToolbarData@MsoCF@@QAGXPBUStaticToolbarDesc@2@IPBUStaticMenuDesc@2@I@Z
?ListProperties@IPropertySet@MsoCF@@QAGXPAHPAIHI@Z
?LookupProperty@MsoCF@@YGABUPropertyInfo@1@I@Z
?OnFinalMessage@CWindow@MsoCF@@UAGXPAUHWND__@@@Z
?OnPropertyChange@IPropertySet@MsoCF@@UAGXABUPropertyInfo@2@@Z
?ProduceAtom@MsoCF@@YGXPAPAVIAtom@1@PBXH@Z
?RegisterPropertySpace@MsoCF@@YGXPBUPropertySpaceInfo@1@@Z
?Set@Properties@MsoCF@@YGXPAUIPropertySet@2@ABUPropertyInfo@2@PBXW4PropertyType@2@@Z
?SetAllProperties_Imp@IPropertySet@MsoCF@@UAGXPAU12@@Z
?SetProperty@IPropertySet@MsoCF@@QAGXABUPropertyInfo@2@ABVCPropertyValue@2@@Z
?SetWtzFromPattern@Strings@MsoCF@@YGXAAV?$CWtzInBuffer_Template@V?$CBuffer@_W@MsoCF@@@2@PAUHINSTANCE__@@IQAPB_WH@Z
?SetWzFromNumber@Strings@MsoCF@@YGXAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@IHHPAH@Z
?SetWzFromNumber@Strings@MsoCF@@YGXAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@_KHHPAH@Z
?SetWzFromPattern@Strings@MsoCF@@YGXAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@PAUHINSTANCE__@@IQAPB_WHPAH@Z
?SetWzFromResource@Strings@MsoCF@@YGXAAV?$CWzInBuffer_T@V?$String@UWzTraits@MsoCF@@@MsoCF@@V?$CBuffer@_W@2@@2@PAUHINSTANCE__@@IPAH@Z
?Start@Frame@MsoCF@@YGXXZ
?Start@Utilities@MsoCF@@YGXHPAU_msotcfcf@@@Z
?TerminateTheApp@Frame@MsoCF@@YGXXZ
?TheActionManager@MsoCF@@YGPAUIActionManager@1@XZ
?TheApp@Frame@MsoCF@@YGPAUAFrameApp@2@XZ
?WndProc@CWindow@MsoCF@@UAGJIIJ@Z
?Zero@Memory@MsoCF@@YGXPAXHABVCBufferBase@2@@Z
?c_Zeros@MsoCF@@3QBEB
?g_FastBufferAllocator@MsoCF@@3VCFastBufferAllocator@1@A
?g_FixedBufferAllocator@MsoCF@@3VCFixedBufferAllocator@1@A
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ