Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
54b537ee0cf6153ebfa950671f826dc80835c1fc8373536daa2271332697ad44_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
54b537ee0cf6153ebfa950671f826dc80835c1fc8373536daa2271332697ad44_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
54b537ee0cf6153ebfa950671f826dc80835c1fc8373536daa2271332697ad44_NeikiAnalytics.exe
Size
413KB
MD5
4daa2465815f4bffd3577894b76ea560
SHA1
6211afee2ddb0e274065c236b0c4fe4fa2673eb8
SHA256
54b537ee0cf6153ebfa950671f826dc80835c1fc8373536daa2271332697ad44
SHA512
ab38a4b7f9a678d4ac0f15d8711f729f2037fe19791a8e06a926778c75bb011a2b4e518ea3bf56bc92694ee575212d5418f76df1c93e32ada42b5438b4929c7e
SSDEEP
6144:9UG80ydP+7FdPIpmW+cwGgSlvyAzCE6psKimEQTohr1MU8/yaROKW5b:9c0GP+rPIpmWYavylpsKimpo91B8VhW9
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
C:\agent\_work\13\s\UIOTrunk\builds\x64\Release\hpbuiocert.pdb
GetLastError
CloseHandle
WriteConsoleW
HeapSize
ReadConsoleW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
SetLastError
QueryPerformanceCounter
GetModuleFileNameW
ExpandEnvironmentStringsW
InitializeCriticalSection
GetCurrentProcessId
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
GetTickCount
CreateFileW
Sleep
SetFilePointer
WriteFile
OutputDebugStringW
GetCurrentThreadId
OpenProcess
GetFileAttributesExW
GetCommandLineW
GetTempFileNameW
GetLongPathNameW
SearchPathW
FormatMessageW
LocalFree
LoadLibraryW
GetProcAddress
CreateMutexW
WaitForSingleObject
CreateFileMappingW
MapViewOfFile
ReleaseMutex
UnmapViewOfFile
QueryPerformanceFrequency
WideCharToMultiByte
GetStringTypeW
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
RtlUnwind
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
CredWriteW
RevertToSelf
CredReadW
CredFree
CredDeleteW
DuplicateTokenEx
ImpersonateLoggedOnUser
RegCreateKeyExW
RegCloseKey
CertGetCertificateContextProperty
CertCreateCertificateContext
CertVerifyTimeValidity
CertFreeCertificateContext
CertGetCertificateChain
CertFreeCertificateChain
NCryptOpenKey
NCryptOpenStorageProvider
NCryptGetProperty
NCryptEnumKeys
NCryptFreeObject
CreateIPPProvider2
PathIsFileSpecW
PathFindFileNameW
PathRemoveFileSpecW
PathFindExtensionW
SHGetFolderPathW
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString
SysAllocString
SysFreeString
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
??0Address@UnifiedIO@@QEAA@AEBV01@@Z
??0Address@UnifiedIO@@QEAA@XZ
??0HTTPRequest@UnifiedIO@@QEAA@AEBV01@@Z
??0HTTPRequest@UnifiedIO@@QEAA@XZ
??0HTTPResponse@UnifiedIO@@QEAA@AEBV01@@Z
??0HTTPResponse@UnifiedIO@@QEAA@XZ
??0ICertificateProvider@UnifiedIO@@QEAA@AEBV01@@Z
??0ICertificateProvider@UnifiedIO@@QEAA@XZ
??0IPPProvider@UnifiedIO@@QEAA@AEBV01@@Z
??0MIBConnection@UnifiedIO@@QEAA@AEBV01@@Z
??0MIBConnection@UnifiedIO@@QEAA@XZ
??0Notifier@UnifiedIO@@QEAA@AEBV01@@Z
??0Notifier@UnifiedIO@@QEAA@XZ
??0Stream@UnifiedIO@@QEAA@AEBV01@@Z
??0Stream@UnifiedIO@@QEAA@XZ
??1Address@UnifiedIO@@MEAA@XZ
??1HTTPRequest@UnifiedIO@@UEAA@XZ
??1HTTPResponse@UnifiedIO@@UEAA@XZ
??1ICertificateProvider@UnifiedIO@@UEAA@XZ
??1MIBConnection@UnifiedIO@@UEAA@XZ
??1Notifier@UnifiedIO@@UEAA@XZ
??1Stream@UnifiedIO@@UEAA@XZ
??4Address@UnifiedIO@@QEAAAEAV01@AEBV01@@Z
??4HTTPRequest@UnifiedIO@@QEAAAEAV01@AEBV01@@Z
??4HTTPResponse@UnifiedIO@@QEAAAEAV01@AEBV01@@Z
??4ICertificateProvider@UnifiedIO@@QEAAAEAV01@AEBV01@@Z
??4IPPProvider@UnifiedIO@@QEAAAEAV01@AEBV01@@Z
??4MIBConnection@UnifiedIO@@QEAAAEAV01@AEBV01@@Z
??4Notifier@UnifiedIO@@QEAAAEAV01@AEBV01@@Z
??4Stream@UnifiedIO@@QEAAAEAV01@AEBV01@@Z
??_7Address@UnifiedIO@@6B01@@
??_7Address@UnifiedIO@@6BIDisposable@1@@
??_7HTTPRequest@UnifiedIO@@6B01@@
??_7HTTPRequest@UnifiedIO@@6BIDisposable@1@@
??_7HTTPResponse@UnifiedIO@@6B@
??_7ICertificateProvider@UnifiedIO@@6B01@@
??_7ICertificateProvider@UnifiedIO@@6BIDisposable@1@@
??_7IPPProvider@UnifiedIO@@6B@
??_7MIBConnection@UnifiedIO@@6B01@@
??_7MIBConnection@UnifiedIO@@6BIDisposable@1@@
??_7Notifier@UnifiedIO@@6B01@@
??_7Notifier@UnifiedIO@@6BIDisposable@1@@
??_7Stream@UnifiedIO@@6B01@@
??_7Stream@UnifiedIO@@6BIDisposable@1@@
CreateCertificateProvider
CreateVaultStoreProvider
DisposeCertificateProvider
DisposeVaultStoreProvider
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ