Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
5d4ec4a71de06a17aac52b4bef2dc10af45be6933a32b64afdacce9bda7afc91_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
5d4ec4a71de06a17aac52b4bef2dc10af45be6933a32b64afdacce9bda7afc91_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
5d4ec4a71de06a17aac52b4bef2dc10af45be6933a32b64afdacce9bda7afc91_NeikiAnalytics.exe
Size
620KB
MD5
6d737174eab2d4551847fe524e3fdee0
SHA1
f59bc4fd57976754735c709c28d0ae85ff62c906
SHA256
5d4ec4a71de06a17aac52b4bef2dc10af45be6933a32b64afdacce9bda7afc91
SHA512
9242367d5830812692f4b789f7e691d2163dc2298bb7244a4fdbd9f70e86ccd741191bf62f916310fd1a87e086d0be4f4727677a443732bf969d27ee78f4a3dd
SSDEEP
12288:oZ3wjORrgM5JOWhr/2t0R1WnOE+1ZrnJ1vQrWC9/k9SpTu1bXrdwCunvt9ew0fS:oZ3owUYJOWhLVRshsJmrWC9SYTMbXNup
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
g:\DailyBuild\SaaSbee_SVN\Bin\Release\zData.pdb
CreateDirectoryW
FindClose
MoveFileW
FindFirstFileW
DeleteFileA
AreFileApisANSI
GetSystemTime
LocalFree
GetTempPathA
GetCurrentProcessId
DeleteFileW
CloseHandle
GetVersionExA
OutputDebugStringA
DeleteCriticalSection
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
LoadLibraryA
GetDiskFreeSpaceW
EnterCriticalSection
LockFileEx
HeapSize
GetProcAddress
GetLastError
GetTempPathW
FlushFileBuffers
MultiByteToWideChar
GetFullPathNameW
CreateFileW
ReadFile
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
LeaveCriticalSection
HeapDestroy
FormatMessageW
Sleep
LoadLibraryW
WideCharToMultiByte
InitializeCriticalSection
WriteFile
FormatMessageA
GetSystemTimeAsFileTime
GetProcessHeap
UnlockFileEx
GetTickCount
OutputDebugStringW
LockFile
UnlockFile
InterlockedCompareExchange
WaitForSingleObject
HeapFree
QueryPerformanceCounter
SystemTimeToFileTime
HeapAlloc
FreeLibrary
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
SetFilePointer
CreateMutexW
GetFileSize
CreateFileA
HeapReAlloc
GetFullPathNameA
GetCurrentThreadId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedExchange
?Sleep@CThread@Cmm@@SAXK@Z
?Replace@?$CStringT@D@Cmm@@QAEXDD@Z
??0?$CStringT@D@Cmm@@QAE@ABV01@@Z
??Y?$CStringT@D@Cmm@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
CmmMQ_GetService
?CompareNoCase@?$CStringT@_W@Cmm@@QBEHPB_W@Z
??0CCritical@Cmm@@QAE@XZ
??1CCritical@Cmm@@QAE@XZ
?Lock@CCritical@Cmm@@QAEXXZ
?Unlock@CCritical@Cmm@@QAEXXZ
??Y?$CStringT@D@Cmm@@QAEAAV01@PB_W@Z
??Y?$CStringT@D@Cmm@@QAEAAV01@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??Y?$CStringT@_W@Cmm@@QAEAAV01@PBD@Z
??M?$CStringT@_W@Cmm@@QBE_NABV01@@Z
??0?$CStringT@D@Cmm@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?StringToBool@Cmm@@YAHABV?$CStringT@_W@1@AAH@Z
?BoolToString@Cmm@@YAXHAAV?$CStringT@_W@1@@Z
?StringToInt64@Cmm@@YAHABV?$CStringT@D@1@AA_J@Z
??8?$CStringT@_W@Cmm@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?StringToInt@Cmm@@YAHABV?$CStringT@_W@1@AAH@Z
??8?$CStringT@D@Cmm@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Find@?$CStringT@D@Cmm@@QBEPADPBDH@Z
??Y?$CStringT@_W@Cmm@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?FromTimeT@Time@Cmm@@SA?AV12@_J@Z
?ToTimeT@Time@Cmm@@QBE_JXZ
?IntToString@Cmm@@YAXHAAV?$CStringT@_W@1@@Z
??9?$CStringT@_W@Cmm@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0?$CStringT@_W@Cmm@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4?$CStringT@_W@Cmm@@QAEAAV01@PB_W@Z
?Replace@?$CStringT@_W@Cmm@@QAEXPB_W0@Z
?Int64ToString@Cmm@@YAH_JAAV?$CStringT@D@1@@Z
??4?$CStringT@D@Cmm@@QAEAAV01@ABV01@@Z
??0?$CStringT@D@Cmm@@QAE@XZ
??4?$CStringT@D@Cmm@@QAEAAV01@PBD@Z
??Y?$CStringT@D@Cmm@@QAEAAV01@PBD@Z
?GetBuffer@?$CStringT@D@Cmm@@QAEPADI@Z
?GetBuffer@?$CStringT@_W@Cmm@@QAEPA_WI@Z
?SetLength@?$CStringT@_W@Cmm@@QAEXI@Z
?SetLength@?$CStringT@D@Cmm@@QAEXI@Z
?cmm_str_convert@@YAIHPADIPB_WI@Z
?cmm_str_convert@@YAIHPA_WIPBDI@Z
??4?$CStringT@_W@Cmm@@QAEAAV01@ABV01@@Z
??0CSBMBMessage_NotifyAfterInit@@QAE@XZ
??1CSBMBMessage_NotifyAfterInit@@UAE@XZ
??0CSBMBMessage_NotifyBeforeTerm@@QAE@XZ
??1CSBMBMessage_NotifyBeforeTerm@@UAE@XZ
??0?$CStringT@D@Cmm@@QAE@PBD@Z
??1?$CStringT@D@Cmm@@UAE@XZ
??8?$CStringT@D@Cmm@@QBE_NPBD@Z
??0?$CStringT@_W@Cmm@@QAE@XZ
??0?$CStringT@_W@Cmm@@QAE@ABV01@@Z
??0?$CStringT@_W@Cmm@@QAE@PB_W@Z
??0?$CStringT@_W@Cmm@@QAE@PBD@Z
??1?$CStringT@_W@Cmm@@UAE@XZ
??B?$CStringT@_W@Cmm@@QBEPB_WXZ
??Y?$CStringT@_W@Cmm@@QAEAAV01@PB_W@Z
??Y?$CStringT@_W@Cmm@@QAEAAV01@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?MoveFolder@CFileName@Cmm@@SA_NABV?$CStringT@_W@2@0@Z
?ParseMsg@?$CmmMessageTemplate_1@V?$CStringT@D@Cmm@@@Archive@Cmm@@UAEHPBVCmmMQ_Msg@3@@Z
?Find@?$CStringT@_W@Cmm@@QBEPA_WPB_WH@Z
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_decode_pointer
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_encoded_null
_malloc_crt
_encode_pointer
??_U@YAPAXI@Z
??_V@YAXPAX@Z
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?terminate@@YAXXZ
?what@exception@std@@UBEPBDXZ
memmove_s
realloc
_localtime64_s
malloc
free
strncmp
memmove
__CxxFrameHandler3
memcpy
memset
_CxxThrowException
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
InitModule
TermModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ