Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
6c3ef0904ad7afffe3374608556f0b7723e3b4d484a2bedc44a54dcfa18c4046_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
6c3ef0904ad7afffe3374608556f0b7723e3b4d484a2bedc44a54dcfa18c4046_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
6c3ef0904ad7afffe3374608556f0b7723e3b4d484a2bedc44a54dcfa18c4046_NeikiAnalytics.exe
Size
459KB
MD5
9dd2d3a7582cd7116318291631e9aba0
SHA1
c5935be7fdbcd0afb1303db5a025dcde43c5cf0d
SHA256
6c3ef0904ad7afffe3374608556f0b7723e3b4d484a2bedc44a54dcfa18c4046
SHA512
7e8986e484067e9c3f804e12ad003c2db577dcf55df5060cf4ef37c8b454b966ca9e24aaaca5d4069fa24aef1008074ffa2998e1e81c53b10fc46f5bdf647e93
SSDEEP
12288:Y/XMv1zvMOxcqwg1JPWYgeWYg955/155/Ta0NwJ6ANjmC:Y0vaQwg1JQa4wJ6AF
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
D:\GitLab-Runner\builds\f3aVvZ6p\1\desktop\warsaw_feature_screening\_tmp\feature\msvc-14.2\prdct\adrs-mdl-64\archt-x86\dbg-symbl-on\thrdp-wn32\thrd-mlt\feature.pdb
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
GetSecurityDescriptorSacl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
FreeSid
AllocateAndInitializeSid
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
GetTokenInformation
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
WideCharToMultiByte
LocalFree
CreateSemaphoreA
ReleaseSemaphore
Sleep
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CloseHandle
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
VirtualQuery
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
VerSetConditionMask
GetModuleHandleA
GetProcAddress
VerifyVersionInfoW
GetModuleFileNameA
CreateFileW
GetLastError
GetModuleHandleW
AreFileApisANSI
MultiByteToWideChar
FreeLibrary
LoadLibraryA
SetLastError
ReleaseMutex
DuplicateHandle
GetCurrentProcess
OpenProcess
GetCurrentProcessId
LocalAlloc
SetThreadPriority
CreateThread
CreateSemaphoreW
lstrcpyA
lstrlenA
EnterCriticalSection
CreateEventW
SetEvent
WaitForSingleObject
TerminateThread
lstrcatA
CreateMutexW
CreatePipe
ReadFile
GetVersionExW
VirtualFree
VirtualAlloc
OpenEventW
GetModuleFileNameW
GetCurrentThreadId
HeapAlloc
GetProcessHeap
HeapFree
ResetEvent
TerminateProcess
FormatMessageW
DisableThreadLibraryCalls
InitializeCriticalSectionAndSpinCount
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
QueryPerformanceFrequency
GetComputerNameA
CreateEventA
OpenEventA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
memset
memmove
__std_type_info_destroy_list
__current_exception_context
__current_exception
memcpy
memcmp
__std_terminate
__std_type_info_compare
_purecall
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__C_specific_handler
strchr
strrchr
__CxxFrameHandler4
_seh_filter_dll
_configure_narrow_argv
_cexit
_initterm_e
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_crt_atexit
_errno
_invalid_parameter_noinfo
strerror
terminate
_initterm
_invalid_parameter_noinfo_noreturn
_register_onexit_function
realloc
malloc
free
_callnewh
_aligned_free
_aligned_malloc
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vsprintf
strcpy
strlen
strcpy_s
tolower
_wcsicmp
_stricmp
wcscpy
strncpy
strcmp
_time64
floor
_dclass
modf
localeconv
function1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ