Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
182ad2f09a9c83bb24146b58cb58fc0feb9a6eefb3dd879f35938c87bc27bf65_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
182ad2f09a9c83bb24146b58cb58fc0feb9a6eefb3dd879f35938c87bc27bf65_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
182ad2f09a9c83bb24146b58cb58fc0feb9a6eefb3dd879f35938c87bc27bf65_NeikiAnalytics.exe
Size
452KB
MD5
0e0f51f7e1fc6f9d9c394acbbfc132a0
SHA1
cc985c79b438e557b2c2a47c5a1bbe0167b2a79b
SHA256
182ad2f09a9c83bb24146b58cb58fc0feb9a6eefb3dd879f35938c87bc27bf65
SHA512
d6ad52d885061192fa3b455c9f3777be2a1c6d1e180c13eac8a166c55631cf2f89357a59b128956c36430b2baee5eb85c8eff836b1bbce7c0fd3cee346486541
SSDEEP
12288:d1Ta0RB6r2qjG7YAK2llG/8Cu5mtd6Fno:dkLTcllGZ0Fno
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\rc_v11_personal_20230209_branch\Build\Release\WPSOffice\office6\pptreader.pdb
?toFloat@QString@kso_qt@@QBEMPA_N@Z
?split@QString@kso_qt@@QBE?AVQStringList@2@VQChar@2@W4SplitBehavior@12@W4CaseSensitivity@Qt@2@@Z
?shared_null@QHashData@kso_qt@@2U12@B
?nextNode@QHashData@kso_qt@@SAPAUNode@12@PAU312@@Z
?free_helper@QHashData@kso_qt@@QAEXP6AXPAUNode@12@@Z@Z
?rehash@QHashData@kso_qt@@QAEXH@Z
?detach_helper@QHashData@kso_qt@@QAEPAU12@P6AXPAUNode@12@PAX@ZP6AX0@ZHH@Z
?allocateNode@QHashData@kso_qt@@QAEPAXH@Z
?sharedNull@QArrayData@kso_qt@@SAPAU12@XZ
?deallocate@QArrayData@kso_qt@@SAXPAU12@II@Z
?allocate@QArrayData@kso_qt@@SAPAU12@IIIV?$QFlags@W4AllocationOption@QArrayData@kso_qt@@@2@@Z
?qBadAlloc@kso_qt@@YAXXZ
?compare@QString@kso_qt@@QBEHABV12@W4CaseSensitivity@Qt@2@@Z
?begin@QListData@kso_qt@@QBEPAPAXXZ
?mid@QString@kso_qt@@QBE?AV12@HH@Z
?end@QListData@kso_qt@@QBEPAPAXXZ
??0QChar@kso_qt@@QAE@H@Z
?fromUtf16@QString@kso_qt@@SA?AV12@PBGH@Z
?fromLocal8Bit@QString@kso_qt@@SA?AV12@PBDH@Z
?fromUtf8@QString@kso_qt@@SA?AV12@PBDH@Z
??4QString@kso_qt@@QAEAAV01@$$QAV01@@Z
??0QString@kso_qt@@QAE@XZ
?result@QCryptographicHash@kso_qt@@QBE?AVQByteArray@2@XZ
?addData@QCryptographicHash@kso_qt@@QAEXPBDH@Z
??1QCryptographicHash@kso_qt@@QAE@XZ
??0QCryptographicHash@kso_qt@@QAE@W4Algorithm@01@@Z
?fromStdString@QString@kso_qt@@SA?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??BQByteRef@kso_qt@@QBEDXZ
?append@QByteArray@kso_qt@@QAEAAV12@D@Z
?constData@QByteArray@kso_qt@@QBEPBDXZ
??4QByteArray@kso_qt@@QAEAAV01@$$QAV01@@Z
??1QByteArray@kso_qt@@QAE@XZ
??0QByteArray@kso_qt@@QAE@XZ
?fromAscii_helper@QString@kso_qt@@CAPAU?$QTypedArrayData@G@2@PBDH@Z
?utf16@QString@kso_qt@@QBEPBGXZ
?dispose@QListData@kso_qt@@SAXPAUData@12@@Z
?lastIndexOf@QString@kso_qt@@QBEHVQChar@2@HW4CaseSensitivity@Qt@2@@Z
?toInt@QString@kso_qt@@QBEHPA_NH@Z
??1QString@kso_qt@@QAE@XZ
InitializeSListHead
RaiseException
GetLastError
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
LoadLibraryExA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
MultiByteToWideChar
FileTimeToSystemTime
FileTimeToLocalFileTime
ResumeThread
SuspendThread
GetExitCodeThread
TerminateThread
SetThreadPriority
GetCurrentThreadId
WaitForMultipleObjects
CreateEventA
WaitForSingleObject
ResetEvent
SetEvent
CloseHandle
GetSystemTimeAsFileTime
_XCreateLBFromBuffer
ParseBulletImage
_Xu2_vxprintf
_Dg_GetSmartShapeData
_XFastDeallocate
?GetChildCnt@KShape@@QAGJPAH@Z
?GetBSE@KBStore@@QAGJHPAPAVKBse@@@Z
?GetPropBuf@KShapeProp@@QAGPAXXZ
?GetLen@KShapeProp@@QAGHXZ
ParseImageFromBse
?GetFBSE@KBse@@QAGJPAUtagFBSE@@@Z
?GetItemBuf@KShapeProp@@QAGPAXXZ
?GetItemSize@KShapeProp@@QAGGXZ
?GetPropID@KShapeProp@@QAGIXZ
?QueryShapeI4Prop@dgreader@@YAHPAVKShape@@HPAH@Z
?Getfsp@KShape@@QAEAAUtagFSP@@XZ
_Xfreelibrary
?GetBSECnt@KBStore@@QAGHXZ
_kso_AVScanFile
DecryptStorage_PPT
AddCanTermThreadPoolMgr
?InfuseCalloutProp@dgreader@@YAXPAUKPropBagWrapper@@PAVKShape@@@Z
?Infuse3DProp@dgreader@@YAXPAUKPropBagWrapper@@PAVKShape@@@Z
?InfuseShadowProp@dgreader@@YAXPAUKPropBagWrapper@@PAVKShape@@@Z
_XDllMainInit
?Parse@KDrawingContainer@@QAGJPAUIStream@@0H@Z
??1KDrawingContainer@@UAE@XZ
??0KDrawingContainer@@QAE@XZ
_XGetHGBLFromStream
?Parse@KDrawingGrpContainer@@QAGJPAUIStream@@0PAUIKDrawingClientHost@@@Z
??1KDrawingGrpContainer@@UAE@XZ
??0KDrawingGrpContainer@@QAE@XZ
_XZlibInflate
_XCreateILockBytesOnHGBL
_XCreateStreamOnHGBL
_XGblFree
_XGblUnlock
?InfuseLineProp@dgreader@@YAXPAUKPropBagWrapper@@PAVKShape@@PAUIKClientInfuser@@_NIPAH@Z
?InfuseFillProp2@dgreader@@YAXPAUKPropBagWrapper@@PAVKShape@@PAUIKClientInfuser@@_NPAH3@Z
?QueryShapeI4UDefProp@dgreader@@YAHPAVKShape@@HPAH@Z
_XGblLock
_XGblSize
_XGblAlloc
?GetTextBoxData@KClientTextBox@@QAGPAXXZ
?GetTextBoxDataLen@KClientTextBox@@QAGHXZ
?GetDataBuf@KClientData@@QAGPAXXZ
?GetLength@KClientData@@QAGHXZ
?AddReClrFillItem@KShape@@QAEXHH@Z
?AddPicReClrItem@KShape@@QAEXHH@Z
?GetClientData@KShape@@QAGJPAPAVKClientData@@@Z
_Xgetprocaddr
?QueryShapeBoolProp@dgreader@@YAHPAVKShape@@HPAH@Z
?InfuseTextBoxPropFromShape@dgreader@@YAXPAUKPropBagWrapper@@PAVKShape@@@Z
?GetGroupInitRect@KShape@@QAGJPAUtagRECT@@@Z
?Translate@KDgIOSourceImpl@@UAGJPAUIIOAcceptor@@PAVKDrawingGrpContainer@@@Z
_XDateFromTm
?GetItemCnt@KShapeProp@@QAGGXZ
?XMLBlipType@dgreader@@YAHH@Z
_XFastAllocate
?QueryProp@KShapePropTable@@QAGJHPAPAVKShapeProp@@@Z
?GetAnchor@KShape@@QAGPAXPAW4MSOANCHORUINT@@PAH@Z
?GetShapeType@KShape@@QAGJHPAW4MSOSPT@@@Z
?GetClientTextBox@KShape@@QAGJPAPAVKClientTextBox@@@Z
?GetShapePropTable@KShape@@QAGJPAPAVKShapePropTable@@@Z
?GetShapeUDefPropTable@KShape@@QAGJPAPAVKShapePropTable@@@Z
?GetBStore@KDrawingGrpContainer@@QAGJPAPAVKBStore@@@Z
_XRelativePathToAbsolutePath
?SetFollowBackGround@KDgIOSourceImpl@@QAEX_N@Z
?Translate@KDgIOSourceImpl@@UAGJPAUIIOAcceptor@@PAVKDrawingContainer@@@Z
?Init@KDgIOSourceImpl@@QAGJPAUIKClientInfuser@@@Z
??1KDgIOSourceImpl@@QAE@XZ
??0KDgIOSourceImpl@@QAE@XZ
?GetShapePropFlags@KShape@@QAGJPAUMSOSPFLAGS@@@Z
?GetShapes@KDrawingContainer@@QAGJPAPAVKShape@@@Z
?GetShapeID@KShape@@QAGJPAI@Z
?GetChild@KShape@@QAGJHPAPAV1@@Z
_Xloadlibrary
?kCachedTr@krt@@YAPB_WPBD00H@Z
?getIntInfo@auth@krt@@YAHABVQString@kso_qt@@@Z
?isVldTurnedOn@krt@@YA_NXZ
?getString@l10n@krt@@YA?AVQString@kso_qt@@ABV34@00@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
_except_handler4_common
__current_exception_context
__current_exception
wcschr
wcsrchr
memset
memmove
__CxxFrameHandler3
_CxxThrowException
memcpy
_errno
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo
_controlfp
_set_new_handler
_beginthreadex
terminate
ceil
floor
wcsncmp
wcsnlen
wcsncpy_s
strnlen
_wcsnicmp
wcscat_s
clock
__stdio_common_vsnwprintf_s
_callnewh
malloc
free
_pr_CreateSource
_wpp_CreateSourceEx
filterpluginFormatCorrect
filterpluginImportCreate
filterpluginRegister
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ