Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2f7bbec02ecbcf4962a0504fa186fb63c2bae17f47eed9654abceb4dbaefa94d_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2f7bbec02ecbcf4962a0504fa186fb63c2bae17f47eed9654abceb4dbaefa94d_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Target
2f7bbec02ecbcf4962a0504fa186fb63c2bae17f47eed9654abceb4dbaefa94d_NeikiAnalytics.exe
Size
3.6MB
MD5
c47749d3966af4c1b2514ede02fe95d0
SHA1
329eed38653bb879b29a5daa92eccc2523d46f49
SHA256
2f7bbec02ecbcf4962a0504fa186fb63c2bae17f47eed9654abceb4dbaefa94d
SHA512
4c2bd5a14082673a1d7209d5a3d641562585911f8aa69b7c9d594896f1daf8938e44e3b880e631f2d070f77a02a0f7b2598c14310e31de89ca846472e5e653a2
SSDEEP
49152:TpgdZwkQNAs6WDiNJV94m5yiy9yoP7w4BX4niqSdsnPlvqY8igJeb+0Mnri:adZwFZoNnDfVSw4a+ds9v8ig0
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
H:\baidu\netdisk\pc-yunbrowser\output\YunDetectService.pdb
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
GetFileAttributesW
GetVersionExW
UnmapViewOfFile
HeapValidate
Sleep
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
LoadLibraryA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
GetSystemInfo
LoadLibraryW
HeapCompact
UnlockFile
GetProcAddress
CreateFileMappingA
LocalFree
LockFileEx
GetCurrentProcessId
SystemTimeToFileTime
FreeLibrary
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
OpenMutexW
ReleaseMutex
OpenFileMappingW
GetTempFileNameW
VirtualQuery
GetModuleHandleW
CreateProcessW
GlobalAlloc
GetVolumeInformationA
GlobalFree
DeviceIoControl
CreateEventA
CreateSemaphoreA
ReleaseSemaphore
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedExchangeAdd
TlsAlloc
WaitForMultipleObjects
TerminateThread
QueueUserAPC
CreateEventW
SetEvent
SleepEx
PostQueuedCompletionStatus
CreateIoCompletionPort
SetWaitableTimer
GetQueuedCompletionStatus
VerSetConditionMask
VerifyVersionInfoW
CreateWaitableTimerW
WaitForMultipleObjectsEx
ResetEvent
TlsGetValue
TlsSetValue
TlsFree
DecodePointer
OpenEventW
OpenProcess
TerminateProcess
GetPrivateProfileIntW
WriteConsoleW
SetConsoleTextAttribute
FreeConsole
GetConsoleScreenBufferInfo
GetStdHandle
AllocConsole
GetFullPathNameW
HeapCreate
TryEnterCriticalSection
AreFileApisANSI
WriteFile
CreateDirectoryW
ReadFile
GetFileSize
CreateFileW
WideCharToMultiByte
WaitForSingleObject
DeleteFileW
CloseHandle
MultiByteToWideChar
SetLastError
RaiseException
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
CreateWaitableTimerA
GetModuleHandleA
ResumeThread
OpenEventA
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
GetEnvironmentVariableW
ConvertThreadToFiber
ConvertFiberToThread
GetFileType
GetModuleHandleExW
FindNextFileW
FindFirstFileW
FindClose
CreateFiber
DeleteFiber
SwitchToFiber
GetStartupInfoW
HeapSize
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetCurrentProcess
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapDestroy
LoadCursorW
MessageBoxW
GetProcessWindowStation
GetWindowLongW
CallWindowProcW
SendMessageTimeoutW
CreateWindowExW
GetUserObjectInformationW
IsWindow
PostMessageW
GetMessageW
TranslateMessage
DispatchMessageW
GetClassInfoExW
RegisterClassExW
UnregisterClassW
SetWindowLongW
DestroyWindow
KillTimer
SetTimer
DefWindowProcW
CryptGetUserKey
CryptEnumProvidersW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptSignHashW
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
SHGetFolderPathW
SHGetSpecialFolderPathW
CoLoadLibrary
CoCreateGuid
CoUninitialize
CoInitializeEx
CoFreeLibrary
StringFromCLSID
CoTaskMemFree
CoCreateInstance
SysAllocString
VariantInit
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
VarBstrCmp
SysStringLen
VariantClear
SysFreeString
SHDeleteKeyW
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?classic@locale@std@@SAABV12@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?toupper@?$ctype@D@std@@QBEDD@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
HttpQueryInfoA
HttpEndRequestA
InternetReadFile
InternetCloseHandle
InternetOpenW
InternetSetOptionA
InternetOpenUrlW
InternetWriteFile
HttpOpenRequestA
InternetConnectA
InternetOpenA
HttpSendRequestExA
InternetQueryDataAvailable
HttpAddRequestHeadersA
recv
send
getpeername
getsockopt
bind
ntohs
htonl
ntohl
freeaddrinfo
getaddrinfo
WSAGetLastError
WSAAddressToStringW
setsockopt
WSASocketW
WSASend
WSARecv
listen
select
shutdown
ioctlsocket
closesocket
WSACleanup
WSAStartup
WSASetLastError
EnumProcesses
GetModuleBaseNameW
GetAdaptersInfo
GetAcceptExSockaddrs
AcceptEx
memcpy
memset
__CxxFrameHandler3
__vcrt_InitializeCriticalSectionEx
_except_handler4_common
_CxxThrowException
__std_type_info_compare
memchr
strrchr
__std_terminate
_purecall
memmove
wcsrchr
__std_exception_copy
strstr
strchr
__std_exception_destroy
wcschr
wcsstr
_wfsopen
__stdio_common_vswprintf_s
__p__commode
__stdio_common_vsprintf_s
fread
fputs
__stdio_common_vfprintf
__acrt_iob_func
fopen
_wfopen
fseek
ftell
_fileno
fgets
__stdio_common_vsprintf
__stdio_common_vsscanf
fclose
__stdio_common_vfwprintf
fflush
ferror
feof
__stdio_common_vswprintf
_set_fmode
fwrite
__stdio_common_vsnwprintf_s
_setmode
__stdio_common_vswscanf
_beginthreadex
terminate
_endthreadex
_invalid_parameter_noinfo_noreturn
_c_exit
_errno
abort
signal
strerror_s
raise
_controlfp_s
_invalid_parameter_noinfo
_exit
_set_app_type
_initialize_onexit_table
_register_onexit_function
exit
strerror
_crt_atexit
_initterm_e
_initterm
_get_wide_winmain_command_line
_cexit
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_initialize_wide_environment
_configure_wide_argv
strcmp
wmemcpy_s
isalnum
wcsnlen
ispunct
_wcsicmp
_stricmp
strcspn
_strnicmp
wcscspn
wcsspn
isxdigit
wcsncpy_s
isspace
strncpy
_wcslwr_s
iswspace
wcscat_s
wcscpy_s
strspn
strncmp
strnlen
free
_set_new_mode
malloc
realloc
_msize
_recalloc
_callnewh
calloc
_stat64i32
_waccess
_atoi64
strtoul
strtol
_wtoi
_wtoi64
atoi
_localtime64_s
_time64
_gmtime64_s
wcsftime
_gmtime64
_mbsicmp
_mbsstr
_mbslwr_s
_mbscmp
_mbsinc
_mbschr
qsort
__setusermatherr
_except1
_configthreadlocale
getenv
BCryptGenRandom
CertFindCertificateInStore
CertGetCertificateContextProperty
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
?$TSS0@?1??get_instance@?$singleton@VCRequestHandlerFactory@@@serialization@boost@@CAAAVCRequestHandlerFactory@@XZ@4HA
?get_instance@?$singleton@VCRequestHandlerFactory@@@serialization@boost@@CAAAVCRequestHandlerFactory@@XZ
?get_mutable_instance@?$singleton@VCRequestHandlerFactory@@@serialization@boost@@SAAAVCRequestHandlerFactory@@XZ
?instance@?$singleton@VCRequestHandlerFactory@@@serialization@boost@@0AAVCRequestHandlerFactory@@A
?t@?1??get_instance@?$singleton@VCRequestHandlerFactory@@@serialization@boost@@CAAAVCRequestHandlerFactory@@XZ@4V?$singleton_wrapper@VCRequestHandlerFactory@@@detail@34@A
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ