Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
642f19cac63ee00cc3c29af0e778afa0_NeikiAnalytics.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
642f19cac63ee00cc3c29af0e778afa0_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
Target
642f19cac63ee00cc3c29af0e778afa0_NeikiAnalytics.exe
Size
59KB
MD5
642f19cac63ee00cc3c29af0e778afa0
SHA1
7f809c53ef04f36450bad5a97c961ce04a5c816a
SHA256
2b22e11a1be13b9da55a87718ed791b4880782465f87d77908f123863ccc81ff
SHA512
bffde2cac21e133c713081189a3668166c1890f7a9d6635066ae8c5cc2ba4ae16d1b7d3e112169354ffeefdf2c9a10132bc24e85d3c00b07b0731bdcddc39773
SSDEEP
768:Pe27PJkJFkqi6IbjIlZYm0TXVZtAUfDWVUEbR1B7dB0IKJEEBgzrPEKjkEOHH41:G2K6ClZ30zPpDWLEa7r8KTOHH
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
R:\TempView\Output\Plugin\Com.Tencent.Qzone\Bin\FlashPlayer.pdb
InitCommonControlsEx
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXStringW@@QAE@PA_W@Z
??BCTXStringW@@QBEPB_WXZ
??H@YA?AVCTXStringW@@_WABV0@@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?GetString@CTXStringW@@QBEPB_WXZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXStringW@@QAE@XZ
?IsEmpty@CTXStringW@@QBE_NXZ
??1CTXStringA@@QAE@XZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??0CTXBSTR@@QAE@PB_W@Z
??0CTXStringW@@QAE@PB_W@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??ICTXBSTR@@QAEPAPA_WXZ
?IsEmpty@CTXBSTR@@QAEHXZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
??0CTXBSTR@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
??0CTXStringA@@QAE@XZ
??M@YA_NABVCTXStringA@@0@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
??1CTXStringW@@QAE@XZ
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
GetEnvironmentVariableW
GetCommandLineW
InitializeCriticalSection
GetCurrentThreadId
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
SetEvent
WaitForSingleObject
OpenProcess
CreateThread
lstrlenW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
SetEnvironmentVariableW
GetModuleFileNameW
DeleteCriticalSection
LeaveCriticalSection
RaiseException
EnterCriticalSection
FindWindowW
CreateWindowExW
SetWindowLongW
GetWindowLongW
DefWindowProcW
SetForegroundWindow
GetDesktopWindow
UnregisterClassA
SendMessageW
PostThreadMessageW
RegisterClassExW
ShellExecuteW
CoUninitialize
CoCreateInstance
CoInitialize
SysStringLen
LoadTypeLi
LoadRegTypeLi
SysFreeString
ord64
ord58
ord31
ord32
ord30
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_adjust_fdiv
_controlfp_s
__setusermatherr
_configthreadlocale
__p__commode
__p__fmode
__set_app_type
_invoke_watson
??0exception@std@@QAE@XZ
??3@YAXPAX@Z
_CxxThrowException
free
??_V@YAXPAX@Z
__CxxFrameHandler3
memset
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
_purecall
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
memcmp
?terminate@@YAXXZ
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE