Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
069d89ecc7c93e978066ceebd8c6b05b40853e0c5656a3c41fc5ac258c7aa795_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
069d89ecc7c93e978066ceebd8c6b05b40853e0c5656a3c41fc5ac258c7aa795_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
069d89ecc7c93e978066ceebd8c6b05b40853e0c5656a3c41fc5ac258c7aa795_NeikiAnalytics.exe
Size
466KB
MD5
d43d692b0e1c7cf16c614faa46adae10
SHA1
60f8125a4fd05d707dd997a178ea0751f9bd159b
SHA256
069d89ecc7c93e978066ceebd8c6b05b40853e0c5656a3c41fc5ac258c7aa795
SHA512
c88557812263a61b5dcb7c71a9db91621ac2111337a602474c8364a528b8fb02124d0942f2b35ccefb38bf49b4988399bc35ac43f60076aee6a5da5212a41255
SSDEEP
6144:SDIFR0HaHgqg0zQ6kGqZp59uViCAMgVXA9tZ0sRRjX4BgZ7ZqHuxNKMfOpSdiq:Sosfl6bqjbu4MgVXAS4X4O2cKMGpol
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
P:\AA-8.2.2\AccessAgent\Recorder\SessionRecorder\Release\SessionRecorder.pdb
FindNextFileW
GetSystemTime
OpenEventW
GetCurrentThreadId
ReleaseMutex
LocalSize
CloseHandle
DeleteFileW
GetCurrentProcessId
LocalFree
SystemTimeToFileTime
FileTimeToSystemTime
HeapAlloc
GetCurrentProcess
HeapFree
GetProcessHeap
LocalAlloc
GetLocalTime
FindClose
EncodePointer
OpenProcess
SetThreadLocale
GetThreadLocale
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
LoadLibraryExW
FindResourceW
Process32FirstW
LoadResource
SizeofResource
VerifyVersionInfoW
Process32NextW
lstrcmpiW
CreateToolhelp32Snapshot
GetModuleHandleW
GetProcAddress
DeleteTimerQueueEx
K32GetModuleBaseNameW
GetComputerNameExW
GlobalLock
GlobalUnlock
FreeLibrary
DeleteCriticalSection
TerminateProcess
DecodePointer
CreateEventW
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateTimerQueue
VirtualQuery
LoadLibraryW
CreateThread
CloseThreadpool
SubmitThreadpoolWork
SetThreadpoolThreadMinimum
CloseThreadpoolCleanupGroupMembers
CreateFileW
GetFileSize
CreateMutexW
CopyFileW
WriteFile
GetPrivateProfileStringW
OutputDebugStringW
WaitForSingleObject
CompareFileTime
VerSetConditionMask
SetFilePointer
LoadLibraryA
CreateThreadpoolCleanupGroup
SetThreadpoolThreadMaximum
CreateThreadpool
CloseThreadpoolCleanupGroup
CreateThreadpoolWork
LoadLibraryExA
MultiByteToWideChar
FindFirstFileW
WideCharToMultiByte
lstrlenA
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeCriticalSection
GetLastError
RaiseException
InitializeCriticalSectionEx
GetForegroundWindow
MapVirtualKeyExW
GetKeyState
GetKeyboardState
ToUnicodeEx
GetKeyNameTextW
GetAsyncKeyState
GetKeyboardLayout
wsprintfW
ReleaseDC
GetDC
GetClientRect
GetWindowDC
GetWindowRect
ClientToScreen
RedrawWindow
WindowFromDC
UnhookWindowsHookEx
WindowFromPoint
TranslateMessage
GetMessageW
PostThreadMessageW
GetParent
GetWindowThreadProcessId
GetThreadDesktop
GetProcessWindowStation
GetUserObjectInformationW
CharNextW
CloseClipboard
EnumWindows
GetWindowTextW
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
GetSystemMetrics
DispatchMessageW
CallNextHookEx
IsWindowVisible
GetTokenInformation
SetSecurityDescriptorDacl
GetSecurityDescriptorSacl
RegQueryValueExW
GetLengthSid
ReportEventW
IsValidSid
DeregisterEventSource
CopySid
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
SetSecurityDescriptorSacl
OpenProcessToken
RegisterEventSourceW
InitializeSecurityDescriptor
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CoInitializeEx
CoUninitialize
CoCreateGuid
StringFromCLSID
CoCreateInstance
UnRegisterTypeLi
SysStringLen
VarUI4FromStr
VariantInit
LoadTypeLi
SysFreeString
LoadRegTypeLi
SysAllocString
RegisterTypeLi
GetUserNameExW
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??0_Locinfo@std@@QAE@PBD@Z
??1_Lockit@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??1facet@locale@std@@MAE@XZ
??_7_Facet_base@std@@6B@
??_7facet@locale@std@@6B@
??0facet@locale@std@@IAE@I@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
_Wcscoll
_Wcsxfrm
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?id@?$collate@_W@std@@2V0locale@2@A
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@PAV32@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?exceptions@ios_base@std@@QAEXH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
_except1
calloc
_resetstkoflw
_recalloc
wcsstr
wcscpy_s
wcscat_s
memcpy_s
malloc
wcsncpy_s
??2@YAPAXI@Z
wcstok_s
vswprintf_s
_vscwprintf
_purecall
??_V@YAXPAX@Z
free
memmove
??3@YAXPAX@Z
iswpunct
iswspace
__clean_type_info_names_internal
_except_handler4_common
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
__CxxFrameHandler3
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
memset
_wsplitpath_s
_vsnwprintf_s
_snwprintf_s
_errno
_wstat64i32
swprintf_s
_CxxThrowException
memcpy
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
wcstoul
realloc
tolower
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
strchr
_itow_s
iswprint
_itoa_s
iswalnum
_wtoi
_wcsnicmp
GdipGetImageEncoders
GdipSaveImageToStream
GdiplusShutdown
GdipCloneBitmapAreaI
GdipGetImageEncodersSize
GdiplusStartup
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipAlloc
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipSetImagePalette
GdipBitmapLockBits
GdipCloneImage
GdipGetImageHeight
GdipCreateBitmapFromStream
GdipFree
GdipGetImageWidth
DeleteDC
GetRandomRgn
CreateRectRgn
OffsetClipRgn
CreateCompatibleBitmap
CreateCompatibleDC
SelectClipRgn
SelectObject
DeleteObject
BitBlt
GetTextMetricsW
GetTextExtentPoint32W
GetObjectW
ord213
ord214
ord12
ord212
ord184
NdrClientCall2
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
RpcBindingFree
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ