Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
1a592f0d572eeff7f90c9095b0d8f770_NeikiAnalytics.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1a592f0d572eeff7f90c9095b0d8f770_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Target
1a592f0d572eeff7f90c9095b0d8f770_NeikiAnalytics.exe
Size
7.1MB
MD5
1a592f0d572eeff7f90c9095b0d8f770
SHA1
49614c03397c9df4541b9bc9aa291fd62c048194
SHA256
14d5dcee79485673247fd1044d1de1978700ca59e96899b89d6e87685a513af8
SHA512
6ca1c937a3927b0cbaa1480d977bfafa225671c860adaa92a1c4d8e2bf9451699c7dc3713e77dbb5d8fbb23c1d93a8ac9da6df2e1fa6b45d9fc34d2e4093675a
SSDEEP
12288:l/v8oxrV8QJY9xzom48Y0RV+CVA4fKs9Hm8:l/vGcszRFP+v0t1
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
WriteProcessMemory
VirtualAllocEx
OpenProcess
SizeofResource
LoadResource
FindResourceW
GlobalFree
MulDiv
GlobalUnlock
GlobalLock
ResumeThread
GlobalAlloc
FreeResource
LockResource
ResetEvent
ReadProcessMemory
VirtualFreeEx
GetVolumeInformationW
DeviceIoControl
GetCurrentProcess
CreateFileW
GetLastError
ReadFile
lstrcpynW
InterlockedDecrement
InterlockedIncrement
OutputDebugStringW
DeleteFileW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
lstrlenA
MultiByteToWideChar
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenW
VirtualAlloc
VirtualFree
GetStartupInfoW
GetModuleHandleW
LoadLibraryA
RaiseException
InterlockedExchange
GetTempPathW
lstrcmpA
SearchPathW
TlsAlloc
TlsFree
SetFileTime
SetFilePointer
CreateWaitableTimerW
SetWaitableTimer
CancelWaitableTimer
IsBadReadPtr
IsBadWritePtr
TlsSetValue
SetEndOfFile
ExpandEnvironmentStringsW
GetExitCodeProcess
WaitForMultipleObjects
LocalAlloc
LocalFree
GetSystemTimeAsFileTime
GetProcessTimes
GetSystemInfo
DuplicateHandle
GetProcessHeap
HeapAlloc
HeapFree
SetErrorMode
LoadLibraryExW
GetFileTime
FileTimeToLocalFileTime
RemoveDirectoryW
GetWindowsDirectoryW
GetShortPathNameW
VirtualQuery
ExitProcess
TerminateProcess
SetProcessWorkingSetSize
GetTempFileNameW
GetSystemTime
SystemTimeToFileTime
FindFirstFileW
FindNextFileW
FindClose
GetFileAttributesW
SetFileAttributesW
WritePrivateProfileSectionW
GetLocalTime
CreateDirectoryW
GetModuleFileNameW
CopyFileW
MoveFileExW
WideCharToMultiByte
LoadLibraryW
GetProcAddress
Sleep
CreateProcessW
CloseHandle
GetTickCount
GetDiskFreeSpaceExW
FlushInstructionCache
SetEvent
CreateEventW
CreateThread
DebugBreak
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
GetCurrentThreadId
CreateMutexW
WaitForSingleObject
GetVersionExW
WriteFile
GetFileSize
lstrcmpiA
GetPrivateProfileIntW
FreeLibrary
wvsprintfW
CharNextW
PostQuitMessage
SendMessageW
DestroyWindow
MapVirtualKeyW
GetKeyNameTextW
SubtractRect
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
EmptyClipboard
SetClipboardData
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
CloseClipboard
wsprintfW
LoadCursorW
GetClassInfoExW
SetWindowLongW
WaitForInputIdle
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
IsIconic
PostMessageW
GetWindowLongW
CallWindowProcW
CreateWindowExW
IsDialogMessageW
GetFocus
SetFocus
SetWindowPos
GetDlgItem
BringWindowToTop
MessageBoxW
ShowWindow
LoadStringW
DefWindowProcW
SetForegroundWindow
GetUpdateRect
GetDC
SetRect
EqualRect
IntersectRect
CopyRect
GetWindowThreadProcessId
FindWindowExW
CharLowerW
ReleaseDC
GetWindowDC
LoadImageW
FindWindowW
RegisterClassExW
GetWindowTextLengthW
ClientToScreen
PtInRect
GetDlgCtrlID
ReleaseCapture
SetCapture
GetCapture
IsWindowEnabled
FillRect
DrawEdge
GetSystemMetrics
InflateRect
DrawFocusRect
OffsetRect
CreateDialogParamW
UpdateWindow
SetCursor
GetSysColor
EndPaint
BeginPaint
DrawTextW
KillTimer
SetTimer
GetSystemMenu
EnableMenuItem
GetWindow
SystemParametersInfoW
InvalidateRect
GetWindowTextW
RedrawWindow
GetWindowRect
GetDesktopWindow
MapWindowPoints
GetParent
GetClientRect
GetMenu
AdjustWindowRectEx
IsWindow
SetWindowTextW
DeleteObject
CreateFontIndirectW
SetTextColor
GetObjectW
GetStockObject
SelectObject
CreateSolidBrush
GetCurrentObject
DeleteDC
CreateCompatibleDC
CreateFontW
CreateDIBPatternBrushPt
GetBitmapBits
CreateDIBSection
GetDeviceCaps
CreateCompatibleBitmap
BitBlt
SetBkMode
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegQueryValueExW
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
RegGetKeySecurity
RegOpenKeyW
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
RegEnumKeyW
RegQueryInfoKeyW
RegSetKeySecurity
CopySid
GetTokenInformation
RegEnumKeyExW
SHGetSpecialFolderPathW
SHFileOperationW
SHGetFileInfoW
SHGetSpecialFolderLocation
SHFreeNameMappings
SHChangeNotify
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
SHAppBarMessage
OleInitialize
CoTaskMemFree
StringFromCLSID
OleUninitialize
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CoUninitialize
ord251
SysAllocStringLen
SysAllocString
SysFreeString
VariantClear
ImageList_Draw
InitCommonControlsEx
_TrackMouseEvent
ImageList_SetImageCount
ImageList_Add
ImageList_Create
ImageList_Remove
ImageList_Duplicate
ImageList_GetIconSize
AlphaBlend
FtpOpenFileW
HttpQueryInfoW
FtpGetFileSize
FindCloseUrlCache
DeleteUrlCacheEntryW
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
InternetGetConnectedState
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
CommitUrlCacheEntryW
CreateUrlCacheEntryW
GetUrlCacheEntryInfoW
InternetCrackUrlW
InternetSetOptionW
InternetQueryOptionW
FtpCommandW
InternetGetLastResponseInfoW
HttpOpenRequestW
HttpSendRequestExW
InternetConnectW
InternetWriteFile
InternetSetOptionA
HttpEndRequestW
InternetReadFile
InternetReadFileExA
InternetSetStatusCallbackW
GetModuleFileNameExW
GetProcessMemoryInfo
EnumProcessModules
EnumProcesses
GetModuleBaseNameW
SHDeleteKeyW
PathRemoveFileSpecW
StrCmpNIW
SHDeleteValueW
StrCatW
StrCmpW
SHGetValueW
PathIsDirectoryW
PathAppendW
PathFileExistsW
SHGetValueA
PathIsDirectoryEmptyW
StrStrIW
PathFindExtensionW
StrCmpNW
PathMatchSpecW
PathGetDriveNumberW
PathCombineW
PathIsRootW
PathIsURLW
SHSetValueW
StrToIntExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust
CryptCATAdminAcquireContext
CryptCATAdminEnumCatalogFromHash
CryptCATAdminReleaseCatalogContext
CryptCATAdminReleaseContext
ObtainUserAgentString
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??1_Lockit@std@@QAE@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??0_Lockit@std@@QAE@XZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
fprintf
_strnicmp
fgets
rewind
swprintf
_ltow
isalnum
_wtol
_ui64tow
time
wcsncat
abs
_beginthreadex
_ftol
memcmp
pow
fseek
ftell
fread
_vsnprintf
_strlwr
_vsnwprintf
swscanf
_wcsnicmp
_wfopen
fwrite
fclose
_purecall
iswdigit
realloc
wcscpy
wcscat
strcpy
strncpy
sprintf
strcat
wcstok
wcsncmp
strtok
_snwprintf
_snprintf
gmtime
malloc
free
tolower
isspace
isprint
__CxxFrameHandler
wcschr
_wtoi
wcsstr
memmove
??2@YAPAXI@Z
_wcslwr
wcsncpy
wcsrchr
wcscmp
strlen
memcpy
memset
_wcsicmp
wcslen
_wtoi64
wcspbrk
strncat
_except_handler3
iswspace
towlower
towupper
_ismbslead
__dllonexit
_onexit
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_stricmp
clock
Netbios
ord42
ord47
ord39
GetOpenFileNameW
GetSaveFileNameW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ