Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
524803d72d8170c3fa57106f365c892eba7ff6d6fc02cbd1354d2282ebf5e419_NeikiAnalytics.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
524803d72d8170c3fa57106f365c892eba7ff6d6fc02cbd1354d2282ebf5e419_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
524803d72d8170c3fa57106f365c892eba7ff6d6fc02cbd1354d2282ebf5e419_NeikiAnalytics.exe
Size
2.3MB
MD5
6010b66e332f30c4964bc1dc326ba340
SHA1
8c8e1634a3d67c2c5c35135460a39d880fc180ac
SHA256
524803d72d8170c3fa57106f365c892eba7ff6d6fc02cbd1354d2282ebf5e419
SHA512
60863b8717fe8cbedbd0d97eab05f3c5a2540ba3eb2d78a621e79312b6af9c7211b6ad52afdf51cdd6780c2f250d0ceeac769bd251bdc90eadef023417b76594
SSDEEP
49152:lOHMy32hp41VXx82sDtTJMeedvJlcRlgkoCpkPiR2j+/hLJ2BxIn8:lOHx32/4x8vDtCXdvzcBolPi
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\jenkins\jobs\GEARUP_CLIENT\workspace\gearup-booster\bin\version\ws2detour.pdb
CertDuplicateCertificateContext
CertCloseStore
CryptQueryObject
CertEnumCertificatesInStore
CertOpenStore
CertGetCertificateContextProperty
CertFreeCertificateContext
CryptMsgGetParam
CertFindCertificateInStore
CertGetNameStringW
CreateFileMappingW
QueryPerformanceFrequency
CloseHandle
GetCurrentProcessId
LocalFree
GetSystemTime
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
OpenFileMappingW
GetEnvironmentVariableW
GetVersion
WriteFile
GetFileType
GetStdHandle
SetLastError
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedExchangeAdd
GetModuleHandleExW
GetSystemTimeAsFileTime
DeleteFiber
ConvertFiberToThread
FreeLibrary
LoadLibraryA
FindNextFileW
FindFirstFileW
FindClose
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
VirtualQuery
VirtualProtect
ResumeThread
FlushInstructionCache
GetCurrentProcess
SetThreadContext
GetThreadContext
VirtualFree
SuspendThread
VirtualAlloc
HeapReAlloc
HeapAlloc
HeapFree
Thread32First
HeapDestroy
HeapCreate
Thread32Next
InterlockedExchange
OpenThread
CreateToolhelp32Snapshot
GetTimeZoneInformation
GetProcessHeap
SetEndOfFile
GetDriveTypeW
WriteConsoleW
IsValidLocale
LocalAlloc
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetCurrentDirectoryW
CreateFileA
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameA
ReadFile
FlushFileBuffers
GetModuleFileNameW
Sleep
LoadLibraryW
GetModuleHandleW
QueryPerformanceCounter
GetQueuedCompletionStatus
UnmapViewOfFile
MapViewOfFile
CreateThread
DeleteCriticalSection
CreateEventW
GlobalFree
EnterCriticalSection
LeaveCriticalSection
GlobalAlloc
InitializeCriticalSection
SetEvent
WaitForSingleObject
GetConsoleCP
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
CreateFileW
GetStartupInfoW
SetHandleCount
SetFilePointer
SetStdHandle
SetEnvironmentVariableA
SetEnvironmentVariableW
IsValidCodePage
GetOEMCP
GetACP
GetLocaleInfoW
HeapSize
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LCMapStringW
CompareStringW
GetCPInfo
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
SetConsoleCtrlHandler
ExitProcess
RaiseException
RtlUnwind
GetCommandLineA
DecodePointer
EncodePointer
InterlockedDecrement
InterlockedIncrement
GetProcAddress
EnumSystemLocalesA
GetLastError
GetMessageW
DestroyWindow
wsprintfW
wvsprintfW
UnregisterClassW
PostMessageW
TranslateMessage
CreateWindowExW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxW
RegisterClassW
DispatchMessageW
DefWindowProcW
CryptEnumProvidersW
SetSecurityDescriptorDacl
DeregisterEventSource
ReportEventW
RegisterEventSourceW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
CryptDestroyKey
CryptGetProvParam
CryptGetUserKey
CryptDecrypt
CryptCreateHash
CryptSetHashParam
CryptSignHashW
CryptDestroyHash
CryptExportKey
InitializeSecurityDescriptor
SHGetSpecialFolderPathW
htonl
getaddrinfo
WSARecv
WSASocketW
WSASend
select
WSAGetLastError
WSAConnect
WSAEnumNetworkEvents
htons
inet_addr
ntohs
setsockopt
sendto
recv
bind
socket
WSAGetOverlappedResult
freeaddrinfo
__WSAFDIsSet
WSASetLastError
closesocket
gethostbyname
WSAAsyncSelect
WSASendTo
ntohl
recvfrom
WSAStartup
connect
WSAIoctl
getpeername
WSAEventSelect
FreeAddrInfoW
getsockopt
WSAAddressToStringA
getservbyname
WSAStringToAddressA
WSARecvFrom
WSACleanup
send
IcmpSendEcho2
IcmpSendEcho
IcmpParseReplies
PathFindFileNameA
PathFileExistsA
PathFindFileNameW
SetHook
UnsetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ