Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4a7ac01d5e505113209775795dd4d8a13481d7da16d0167cb067520b5ba1c719_NeikiAnalytics.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4a7ac01d5e505113209775795dd4d8a13481d7da16d0167cb067520b5ba1c719_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
4a7ac01d5e505113209775795dd4d8a13481d7da16d0167cb067520b5ba1c719_NeikiAnalytics.exe
Size
1.3MB
MD5
3b8c48b55a0d28f4f954e02452b8e9e0
SHA1
2793eeb826f9262887b281fbfb42fa24b12dcbb1
SHA256
4a7ac01d5e505113209775795dd4d8a13481d7da16d0167cb067520b5ba1c719
SHA512
384f221a86aa29114944ab1e649d7f742070ef43f8e02cd6e1c20c8470901f9471c61e8d41a8790da1345a84c476963bb144bb46b0239f60f24bb284ce2c729b
SSDEEP
24576:E96JL2xT+8VfKktutICZFcR9cV/3gIuwn3DDPatTIoRYfhwED:E96JLyMhtICZFcRcQhwnHPatTAfhBD
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?UnregisterAllInterface@ISWApiPlugin@@QAEXXZ
??0ISWApiPlugin@@IAE@PAVISWApi_Dev@@@Z
??0ISWApiX2Y_Dev@@QAE@W4SWDocType@@0@Z
?RegisterInterface@ISWApiPlugin@@QAE?AW4SWErrorCode@@PAVISWApi_DevInterface@@@Z
??1ISWApiX2Y_Dev@@UAE@XZ
??1ISWApiPlugin@@UAE@XZ
?ParseJsonString@SWJsonFactory@@SA?AV?$SWSharedPtr@VSWJson@@@@PBDIPBVParseConfig@1@@Z
?GetOFDPage@OFDPage@ofdcore@@QAEPAVCOFD_Page@@XZ
libiconv_open
libiconv
libiconv_close
?GetTemplatePage@COFD_Page@@QAEPAVCOFD_TemplatePage@@H@Z
?GetTemplateZOrder@COFD_Page@@QAE?AW4OFD_ZOrderType@@H@Z
?ParseContents@COFD_Page@@QAEHXZ
?GetLayerCount@COFD_Page@@QBEHXZ
?GetLayer@COFD_Page@@QBEPAVCOFD_Layer@@H@Z
?GetDisplayMatrix@COFD_Page@@QBE?AVCCA_Matrix@@HHHHH@Z
?LoadStampAnnots@COFD_Page@@QAE?AV?$CCA_ArrayTemplate@PAVCOFD_AnnotationSeal@@@@I@Z
?SetBlendMode@COFD_PageObject@@QAEXW4CA_BlendMode@@@Z
?SetPage@COFD_PageObject@@QAEXPAVCOFD_Page@@@Z
?GetPageObjectCount@COFD_PageBlock@@QBEHXZ
?GetPageObject@COFD_PageBlock@@QBEPAVCOFD_PageObject@@H@Z
?GetClipCount@COFD_Clips@@QBEHXZ
?GetClip@COFD_Clips@@QBEPAVCOFD_ClipRegion@@H@Z
?GetAreaCount@COFD_ClipRegion@@QBEHXZ
?GetArea@COFD_ClipRegion@@QBEPAVCOFD_ClipArea@@H@Z
?Load@COFD_Annotations@@QAEHXZ
?GetAnnotationPageAll@COFD_Annotations@@QAE?AV?$CCA_ArrayTemplate@PAVCOFD_AnnotationPage@@@@I@Z
?GetAnnotationCount@COFD_AnnotationPage@@QBEHXZ
?GetAnnotation@COFD_AnnotationPage@@QBEPAVCOFD_Annotation@@H@Z
?GetCreateDate@COFD_Metadata@@QAE?AVCCA_WString@@XZ
?GetParameter@COFD_Annotation@@QBE?AVCCA_String@@V2@@Z
??0COFD_RenderContext@@QAE@H@Z
??1COFD_RenderContext@@QAE@XZ
?AppendPage@COFD_RenderContext@@QAEXPAVCOFD_Page@@PBVCCA_Matrix@@H@Z
?AppendPageBlock@COFD_RenderContext@@QAEXPAVCOFD_PageBlock@@PBVCCA_Matrix@@PBVCCA_GRect@@@Z
??0COFD_ProgressiveRender@@QAE@PAVCOFD_Page@@HHH@Z
??1COFD_ProgressiveRender@@QAE@XZ
?StartRender@COFD_ProgressiveRender@@QAEXPAVCOFD_RenderContext@@PAVCCA_Device@@@Z
?Continue@COFD_ProgressiveRender@@QAEHXZ
?SetRenderSeal@COFD_ProgressiveRender@@QAEXHHHH@Z
?CountSignatures@COFD_Signatures@@QBEHXZ
?GetSignature@COFD_Signatures@@QAEPAVCOFD_Signature@@H@Z
?GetStampAnnotCount@COFD_Signature@@QAEHXZ
?GetStampAnnot@COFD_Signature@@QAEPAVCOFD_AnnotationSeal@@H@Z
?GetParameter@COFD_Signature@@QBE?AVCCA_String@@V2@@Z
?CreateXMLDoc@CCA_XMLFactory@@QAEPAVICA_XMLDoc@@XZ
?CreateXMLNode@CCA_XMLFactory@@QAEPAVICA_XMLNode@@PBD@Z
?SaveXMLDoc@CCA_XMLFactory@@QAEHPAVICA_XMLDoc@@PAVICA_StreamWriter@@PBD@Z
?LoadRawStream@COFD_Package@@QAEPAVICA_StreamReader@@PAVCOFD_Document@@PBDH@Z
?OFD_LocRelativeToFull@@YA?AVCCA_String@@PBD0@Z
?OFD_GetFileDir@@YA?AVCCA_String@@PBD@Z
?Load@COFD_Attachments@@QAEHXZ
?CountAttachments@COFD_Attachments@@QBEHXZ
?GetAttachment@COFD_Attachments@@QAEPAVCOFD_Attachment@@H@Z
?GetName@COFD_Attachment@@QBE?AVCCA_WString@@XZ
?GetFormat@COFD_Attachment@@QBE?AVCCA_WString@@XZ
?GetDate@COFD_Attachment@@QBE?AVCCA_String@@XZ
?GetSize@COFD_Attachment@@QBEMXZ
?GetFileLoc@COFD_Attachment@@QBE?AVCCA_String@@XZ
?GetSubject@COFD_Metadata@@QAE?AVCCA_WString@@XZ
?GetAuthor@COFD_Metadata@@QAE?AVCCA_WString@@XZ
?GetTitle@COFD_Metadata@@QAE?AVCCA_WString@@XZ
?LoadActions@COFD_OutlineItem@@QAEPAVCOFD_Actions@@XZ
?GetTitle@COFD_OutlineItem@@QBE?AVCCA_WString@@XZ
?GetSignatures@COFD_Document@@QAEPAVCOFD_Signatures@@XZ
?LoadPage@COFD_Document@@QAEPAVCOFD_Page@@H@Z
?GetPageIndexByID@COFD_Document@@QBEHI@Z
?GetPageID@COFD_Document@@QBEHH@Z
?LoadFontFileStream@COFD_Font@@QBEPAVICA_StreamReader@@XZ
?GetSegment@COFD_Shading@@QAEAAUOFD_ShadingSegment@@H@Z
?GetSegmentCount@COFD_Shading@@QBEHXZ
?Black@COFD_Color@@SAPAV1@XZ
?GetCMYK@COFD_Color@@QBEIXZ
?GetColor@COFD_Color@@QBEIXZ
?GetSealOfdImage@COFD_MultiMedia@@QAEPAVCCA_Dib@@PAEHHH@Z
?GetSealImage@COFD_MultiMedia@@QAEHPAVCOFD_OESPlugin@@PAXHAAPAEPAH2333@Z
?LoadStream@COFD_MultiMedia@@QBEPAVICA_StreamReader@@XZ
?GetAction@COFD_Actions@@QBEPAVCOFD_Action@@H@Z
?GetActionCount@COFD_Actions@@QBEHXZ
?CA_GetImageFormat@@YA?AW4CA_ImageFormat@@PAVICA_StreamReader@@@Z
?CA_GetSystemDatetimeString@@YA?AVCCA_String@@XZ
?CreateImageEncoder@CCA_CodecFactory@@QAEPAVICA_ImageEncoder@@W4CA_ImageFormat@@@Z
?CreateImageDecoder@CCA_CodecFactory@@QAEPAVICA_ImageDecoder@@W4CA_ImageFormat@@@Z
?SetClip_Rect@CCA_Device@@UAEHPBVCCA_GRect@@@Z
?Attach@CCA_Device@@UAEXPAVCCA_Dib@@@Z
??1CCA_Device@@UAE@XZ
??0CCA_Device@@QAE@XZ
?Transform@CCA_Path@@QAEXPBVCCA_Matrix@@@Z
?GetPoint@CCA_Path@@QAEAAUCA_PathPoint@@H@Z
??1CCA_Path@@QAE@XZ
??0CCA_Path@@QAE@ABV0@@Z
?Fill@CCA_Dib@@QAEXI@Z
?GetAlpha@CCA_Dib@@QBEPAV1@PBVCCA_Rect@@@Z
?HasAlpha@CCA_Dib@@QBEHXZ
?Create@CCA_Dib@@QAEHHHW4CA_DibFormat@@PAE@Z
??0CCA_Dib@@QAE@XZ
?TransformDistance@CCA_Matrix@@QBEMM@Z
?Inverse@CCA_Matrix@@QAEXXZ
?TransformRect@CCA_Matrix@@QBE?AVCCA_GRect@@ABV2@@Z
?TransformPoint@CCA_Matrix@@QBEXAAN0@Z
?TransformPoint@CCA_Matrix@@QBEXAAM0@Z
?Contact@CCA_Matrix@@QAEXMMMMMM@Z
?Shear@CCA_Matrix@@QAEXMM@Z
?Translate@CCA_Matrix@@QAEXMM@Z
?Reset@CCA_Matrix@@QAEXXZ
??0CCA_Matrix@@QAE@XZ
??4CCA_GRect@@QAEABV0@ABV0@@Z
?UnionRect@CCA_GRect@@QAEHABV1@0@Z
?IntersectRect@CCA_GRect@@QAEHABV1@@Z
?IntersectRect@CCA_GRect@@QAEHABV1@0@Z
?OffsetRect@CCA_GRect@@QAEXMM@Z
?InflateRect@CCA_GRect@@QAEXMMMM@Z
?EqualRect@CCA_GRect@@QBEHABV1@@Z
?GetTemplatePageCount@COFD_Page@@QAEHXZ
?SetRect@CCA_GRect@@QAEXMMMM@Z
?IsRectNull@CCA_GRect@@QBEHXZ
?IsRectEmpty@CCA_GRect@@QBEHXZ
?NormalizeRect@CCA_GRect@@QAEXXZ
??0CCA_GRect@@QAE@MMMM@Z
?CreateMemoryStreamWriter@ICA_StreamWriter@@SAPAV1@H@Z
?CreateFileStreamReader@ICA_StreamReader@@SAPAV1@PBDH@Z
?CreateMemoryStreamReader@ICA_StreamReader@@SAPAV1@PAEIH@Z
?Empty@CCA_BinaryBuf@@QAEXXZ
?TakeOver@CCA_BinaryBuf@@QAEPAEXZ
?SetSize@CCA_BinaryBuf@@QAEXHH@Z
??1CCA_BinaryBuf@@QAE@XZ
??0CCA_BinaryBuf@@QAE@XZ
?Delete@CCA_WString@@QAEHHH@Z
??YCCA_WString@@QAEABV0@PBG@Z
??YCCA_WString@@QAEABV0@ABV0@@Z
?GetInteger@CCA_String@@QBEHXZ
?TrimLeft@CCA_String@@QAEXXZ
?TrimRight@CCA_String@@QAEXXZ
?MakeLower@CCA_String@@QAEXXZ
?Mid@CCA_String@@QBE?AV1@HH@Z
??4CCA_String@@QAEABV0@ABV0@@Z
??0CCA_String@@QAE@XZ
?GetFontData@COFD_Font@@QAEPAVICA_Font@@XZ
?CA_FloatCompare@@YAHABM00@Z
?GetFontDataFromFont@CCA_FontMgr@@QAEPAVICA_StreamReader@@PAVCCA_Font@@@Z
?GetBoundingBox@CCA_Path@@QBE?AVCCA_GRect@@XZ
?CloseFigure@CCA_Path@@QAEXXZ
?CubicBezierTo@CCA_Path@@QAEXMMMMMM@Z
?LineTo@CCA_Path@@QAEXMM@Z
?MoveTo@CCA_Path@@QAEXMM@Z
?ApendPath@CCA_Path@@QAEXPBV1@PBVCCA_Matrix@@@Z
?GetPoints@CCA_Path@@QBEPAUCA_PathPoint@@XZ
?GetPointCount@CCA_Path@@QBEHXZ
?IsRect@CCA_Path@@QBEHXZ
??0CCA_Path@@QAE@XZ
?CloneConvert@CCA_Dib@@QBEPAV1@W4CA_DibFormat@@PBVCCA_Rect@@@Z
?GetPaletteSize@CCA_Dib@@QBEHXZ
??1CCA_Dib@@QAE@XZ
?Contact@CCA_Matrix@@QAEXABV1@@Z
??0CCA_Matrix@@QAE@ABV0@@Z
??0CCA_Matrix@@QAE@MMMMMM@Z
??0CCA_GPoint@@QAE@XZ
?IsNull@CCA_Rect@@QBEHXZ
?IsEmpty@CCA_Rect@@QBEHXZ
?unicode_to_local@CCA_StringConverter@@SA?AVCCA_String@@PBGH@Z
?Remove@CCA_String@@QAEHD@Z
?Right@CCA_String@@QBE?AV1@H@Z
?CompareNoCase@CCA_String@@QBEHPBD@Z
??0CCA_String@@QAE@ABV0@@Z
?UnicodeFromCharCode@CCA_Font@@UBEGI@Z
?LoadFromStream@CCA_Font@@UAEHPAVICA_StreamReader@@H@Z
?LoadFromData@CCA_Font@@UAEHPAEHH@Z
?LoadFont@CCA_Font@@UAEHPBG0HHH@Z
?IsItalic@CCA_Font@@UBEHXZ
?IsBold@CCA_Font@@UBEHXZ
?GlyphIndexFromCharCode@CCA_Font@@UBEII@Z
?GetPostscriptName@CCA_Font@@UBE?AVCCA_String@@XZ
?GetGlyphWidth@CCA_Font@@UBEHH@Z
?GetGlyphPath@CCA_Font@@UAEPAVCCA_Path@@IHH@Z
?GetGlyphHeight@CCA_Font@@UBEHH@Z
?GetGlyphData@CCA_Font@@UBE?AU_CA_GlyphData@@H@Z
?GetGlyphBBox@CCA_Font@@UBE?AVCCA_Rect@@H@Z
?GetFontFace@CCA_Font@@UAEPAXXZ
?GetFamilyName@CCA_Font@@UBE?AVCCA_String@@XZ
?GetDescent@CCA_Font@@UBEHXZ
?GetBBox@CCA_Font@@UBE?AVCCA_Rect@@XZ
?GetAscent@CCA_Font@@UBEHXZ
?CharCodeFromUnicode@CCA_Font@@UBEIG@Z
?GetFullName@CCA_Font@@QBE?AVCCA_WString@@G@Z
??1CCA_Font@@UAE@XZ
??0CCA_Font@@QAE@XZ
?CalcHashTableSize@@YAHH@Z
?HashKey@@YAIABVCCA_WString@@@Z
?FreeDataChain@CCA_Plex@@QAEXXZ
?Create@CCA_Plex@@SAPAU1@AAPAU1@II@Z
?Remove@CCA_WString@@QAEHG@Z
?MakeLower@CCA_WString@@QAEXXZ
?Compare@CCA_WString@@QBEHPBG@Z
??4CCA_WString@@QAEABV0@ABV0@@Z
??0CCA_WString@@QAE@PBGH@Z
??0CCA_WString@@QAE@XZ
??3CCA_Object@@SAXPAX0@Z
??3CCA_Object@@SAXPAX@Z
??2CCA_Object@@SAPAXI@Z
?unicode_to_utf8@CCA_StringConverter@@SA?AVCCA_String@@PBGH@Z
??BCCA_WString@@QBEPBGXZ
??1CCA_WString@@QAE@XZ
??0CCA_WString@@QAE@ABV0@@Z
??1CCA_MutexLock@@QAE@XZ
CA_ReallocMemory
CA_AllocMemory
?CreateFileStreamWriter@ICA_StreamWriter@@SAPAV1@PBGH@Z
?CreateFileStreamReader@ICA_StreamReader@@SAPAV1@PBGH@Z
??1CCA_MutexObject@@QAE@XZ
?Compare@CCA_String@@QBEHPBD@Z
??BCCA_String@@QBEPBDXZ
??1CCA_String@@QAE@XZ
??0CCA_String@@QAE@PBDH@Z
CA_FreeMemory
?Destroy@CCA_Context@@SAXXZ
?Get@CCA_Context@@SAPAV1@XZ
?Create@CCA_Context@@SAXXZ
??4CCA_String@@QAEABV0@PBD@Z
?GetPageBox@COFD_Page@@QAEHW4OFD_PageBoxType@@AAVCCA_GRect@@@Z
??1COFD_Page@@QAE@XZ
?GetCreator@COFD_Metadata@@QAE?AVCCA_WString@@XZ
?GetKeywords@COFD_Metadata@@QAE?AV?$CCA_ObjArrayTemplate@VCCA_WString@@@@XZ
?SetRectEmpty@CCA_GRect@@QAEXXZ
?GetModifyDate@COFD_Metadata@@QAE?AVCCA_WString@@XZ
?GetAnnoReference@COFD_Annotation@@QBE?AV?$CCA_ArrayTemplate@I@@XZ
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
EnterCriticalSection
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetModuleFileNameA
GetModuleHandleA
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
Sleep
CreateMutexW
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
LeaveCriticalSection
DuplicateHandle
CloseHandle
MultiByteToWideChar
GetACP
WaitForSingleObjectEx
InitializeCriticalSection
__std_type_info_destroy_list
__current_exception_context
__current_exception
strchr
_except_handler4_common
memchr
memset
memmove
memcpy
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__std_terminate
__CxxFrameHandler3
_purecall
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm_e
_initterm
_cexit
_errno
_crt_atexit
_invalid_parameter_noinfo_noreturn
_endthread
_beginthread
strtod
atoi
__stdio_common_vsscanf
ferror
_wfopen
__stdio_common_vsprintf
fopen
__acrt_iob_func
fwrite
fread
_getcwd
fflush
fclose
__stdio_common_vfprintf
_libm_sse2_log_precise
_CIatan2
_libm_sse2_cos_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
ceil
floor
_libm_sse2_pow_precise
_callnewh
malloc
free
realloc
_stat64i32
_wstat64i32
rand
bsearch
strncpy
tolower
toupper
_stricmp
getenv
SWInitPlugin
SWUninitPlugin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ