Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
5b58b332b740bed667113f03145ecc75763850c1ec95a477931189e46c4542b1_NeikiAnalytics.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
5b58b332b740bed667113f03145ecc75763850c1ec95a477931189e46c4542b1_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
5b58b332b740bed667113f03145ecc75763850c1ec95a477931189e46c4542b1_NeikiAnalytics.exe
Size
6.3MB
MD5
bb40d935c401113be18fbc567883d5f0
SHA1
221ea090eb578c74cb64a74df75bae06623b9c18
SHA256
5b58b332b740bed667113f03145ecc75763850c1ec95a477931189e46c4542b1
SHA512
02a56a8774a0c75627af79d5810105a9d7620f936b833193b6491056228b07adca8b0902ab8d62d94a882ea93413da7779ffe0fcf131db05cb95d44129f7b72f
SSDEEP
49152:mw4jwKBUvd8JzttyVY81DasilJoaT20MFoc5+OcoP1xbaHdLHkJEZ11QAfloTpca:jO81DaLlJoaT8Focpj+DheTph
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL
t:\setupexe\x86\ship\0\osetup.pdb
RegCloseKey
RegSetValueExW
RegCreateKeyExW
CloseServiceHandle
ChangeServiceConfigW
OpenServiceW
OpenSCManagerW
QueryServiceConfigW
RegFlushKey
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
OpenProcessToken
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
CreateProcessAsUserW
FreeSid
AllocateAndInitializeSid
ConvertSidToStringSidW
LookupAccountNameW
EqualSid
IsValidSid
CheckTokenMembership
ConvertSidToStringSidA
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetTokenInformation
CopySid
InitializeAcl
AddAccessDeniedAce
AddAccessAllowedAce
GetLengthSid
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegEnumKeyW
IsTextUnicode
StartServiceW
QueryServiceStatus
RegOpenKeyExA
RegQueryValueExA
CreateWellKnownSid
OpenThreadToken
SetErrorMode
CloseHandle
lstrlenW
GetVolumeInformationW
VerSetConditionMask
VerifyVersionInfoW
GetCurrentThread
WaitForSingleObject
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
DeleteCriticalSection
HeapReAlloc
HeapAlloc
GetProcessHeap
HeapFree
lstrcmpW
FindNextFileW
RemoveDirectoryW
OpenMutexW
CreateThread
GetExitCodeThread
SetEvent
CreateEventW
GlobalFree
SetEnvironmentVariableW
GetCurrentDirectoryW
GetComputerNameW
IsValidLocale
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
GetTempPathW
GetVersionExW
GetPriorityClass
CreateProcessW
OpenProcess
GetExitCodeProcess
CopyFileW
DeleteFileW
SetFileAttributesW
GetTempFileNameW
GetFileAttributesExW
ReadFile
lstrlenA
WriteFile
CreateFileW
SetFilePointer
GetThreadLocale
GetSystemDirectoryA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InterlockedExchange
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
InterlockedDecrement
InterlockedIncrement
ExitProcess
VirtualQuery
VirtualProtect
GetConsoleMode
GetConsoleCP
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
ReleaseSemaphore
GetSystemInfo
GetOEMCP
GetUserDefaultLangID
MapViewOfFile
DuplicateHandle
UnmapViewOfFile
CreateProcessA
TerminateProcess
HeapValidate
HeapSize
GetSystemDefaultLangID
GetModuleFileNameA
FindFirstFileW
LoadLibraryExW
FreeLibrary
GetCurrentProcess
CompareStringW
CompareStringA
FormatMessageW
LocalFree
ExpandEnvironmentStringsW
GetTimeZoneInformation
GetSystemTime
SystemTimeToTzSpecificLocalTime
MultiByteToWideChar
WideCharToMultiByte
SystemTimeToFileTime
GetDriveTypeW
GetSystemDirectoryW
GetDiskFreeSpaceExW
GetUserDefaultLCID
GetCurrentThreadId
GetTickCount
Sleep
OutputDebugStringA
GetModuleFileNameW
SetLastError
LoadLibraryW
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetCurrentProcessId
GetLastError
FindClose
LocalAlloc
GetFileSize
FreeResource
LockResource
LoadResource
FindResourceW
SizeofResource
lstrcpyA
GetLocalTime
GetVolumeInformationA
GlobalMemoryStatus
DeviceIoControl
QueryDosDeviceW
QueryPerformanceCounter
InitializeCriticalSection
GetSystemDefaultLCID
IsDBCSLeadByte
FindResourceA
GetStringTypeExW
GetACP
IsValidCodePage
EnumUILanguagesW
EnumSystemLocalesW
GetLocaleInfoW
GetCalendarInfoW
GlobalAlloc
GetUserDefaultUILanguage
LoadLibraryA
MulDiv
OpenEventW
CreateDirectoryW
CreateFileA
GetStdHandle
FindAtomW
RaiseException
GetAtomNameW
GlobalLock
AddAtomW
DeleteAtom
SetProcessWorkingSetSize
GlobalDeleteAtom
GlobalAddAtomW
HeapCreate
HeapDestroy
FlushInstructionCache
VirtualAlloc
GetVersionExA
IsProcessorFeaturePresent
VirtualFree
ReleaseMutex
GetSystemTimeAsFileTime
FlushFileBuffers
GetFileType
GetProcessTimes
CreateMutexA
OpenMutexA
CreateSemaphoreA
CreateFileMappingA
CreateEventA
GetShortPathNameA
CoTaskMemFree
OleUninitialize
CreateStreamOnHGlobal
RevokeDragDrop
OleDraw
CoLockObjectExternal
CLSIDFromString
CoDisconnectObject
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
CoInitializeEx
CoUninitialize
OleRun
CLSIDFromProgID
SysStringLen
VariantCopy
VariantChangeType
VariantChangeTypeEx
VarDecAdd
SysAllocStringByteLen
SysStringByteLen
GetErrorInfo
VarDecSu
VarDecMul
VarDecCmp
VarDecInt
OleCreateFontIndirect
VariantClear
VariantInit
SysFreeString
SysAllocString
VarDecRound
VarDecDiv
VarCmp
VarDecFromR8
VarDecFromI4
SysAllocStringLen
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHBindToParent
SHGetFolderLocation
SHBrowseForFolderW
ShellExecuteW
SHChangeNotify
SHGetFolderPathW
LoadImageW
EnableMenuItem
GetSystemMenu
MoveWindow
GetClientRect
PostMessageW
TranslateMessage
UnregisterClassW
RegisterClassExW
CreateWindowExW
DestroyMenu
TrackPopupMenu
GetSubMenu
LoadMenuW
DestroyWindow
DefWindowProcW
IsChild
SetActiveWindow
LoadCursorW
LoadIconW
FindWindowW
ReleaseDC
GetDC
GetSysColor
CopyRect
SetRect
SetCursor
GetFocus
SetTimer
KillTimer
GetCursorPos
GetKeyState
GetCapture
VkKeyScanExW
GetKeyboardLayout
GetSysColorBrush
CreateIconIndirect
GetIconInfo
DestroyIcon
EqualRect
FillRect
IntersectRect
GetWindowPlacement
OffsetRect
DrawIconEx
DrawFocusRect
MapWindowPoints
DrawFrameControl
ScreenToClient
GetDoubleClickTime
GetAsyncKeyState
WindowFromPoint
ClientToScreen
GetParent
NotifyWinEvent
AdjustWindowRectEx
SetWindowPos
GetClassInfoExW
GetWindowRect
RegisterWindowMessageW
TrackPopupMenuEx
InvalidateRect
PtInRect
SetCapture
ReleaseCapture
IsZoomed
wsprintfW
InflateRect
GetSystemMetrics
InvertRect
SetRectEmpty
CallWindowProcW
UpdateWindow
DeferWindowPos
SetWindowRgn
IsRectEmpty
TrackMouseEvent
GetMessageTime
SetParent
FrameRect
AppendMenuW
CreatePopupMenu
GetWindow
EndPaint
BeginPaint
RegisterClassW
GetClassLongW
SetLayeredWindowAttributes
GetPropW
SetPropW
RemovePropW
UnionRect
PeekMessageW
PeekMessageA
MonitorFromWindow
MonitorFromRect
MonitorFromPoint
GetMonitorInfoW
GetMessagePos
DrawEdge
EndDeferWindowPos
BeginDeferWindowPos
FindWindowExW
GetKeyboardState
MsgWaitForMultipleObjects
DrawTextW
SystemParametersInfoA
GetClassNameW
GetMonitorInfoA
EnumDisplayMonitors
LoadBitmapA
GetKeyboardLayoutNameW
GetMenuCheckMarkDimensions
GetWindowThreadProcessId
CharNextA
IsWindowVisible
EnumWindows
GetAncestor
CharNextW
wsprintfA
GetWindowTextLengthW
GetWindowTextW
LoadStringW
ExitWindowsEx
PostThreadMessageW
CharLowerW
CharLowerA
CharUpperW
CharUpperA
ShowWindow
GetDlgItem
SendMessageW
DialogBoxParamW
SetForegroundWindow
GetMessageW
DispatchMessageW
IsWindow
PostQuitMessage
MessageBoxW
SystemParametersInfoW
GetDesktopWindow
EndDialog
SetFocus
SetWindowTextW
SetDlgItemTextW
GetWindowLongW
SetWindowLongW
MessageBeep
DispatchMessageA
EnableWindow
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
StrRetToBufW
wnsprintfA
PathFileExistsW
PathGetDriveNumberW
PathGetCharTypeW
wnsprintfW
wvnsprintfW
WinVerifyTrust
ord116
ord141
ord113
ord111
ord179
ord92
ord78
ord150
ord17
ord160
ord125
ord121
ord118
ord120
ord148
ord65
ord31
ord95
ord180
ord172
ord67
ord91
ord117
ord189
ord174
ord77
ord110
ord194
ord168
ord136
ord181
ord45
ord137
ord70
ord215
ord129
ord14
ord211
ord169
ord190
ord88
ord159
ord32
ord71
ord8
GetUserNameExW
SymGetSymFromAddr64
SymGetLineFromAddr64
SymInitialize
EnumProcesses
GetModuleFileNameExW
GetModuleBaseNameW
EnumProcessModules
SelectObject
DeleteDC
CreateCompatibleDC
CreateDIBSection
SetDIBColorTable
StretchBlt
BitBlt
GetObjectW
CreateFontIndirectW
SetBrushOrgEx
GetBrushOrgEx
RealizePalette
SelectPalette
CreateCompatibleBitmap
GetDeviceCaps
GetDIBits
CreateSolidBrush
CreatePatternBrush
GetPixel
GetEnhMetaFileHeader
GetObjectType
DeleteEnhMetaFile
SetBkColor
StretchDIBits
GetClipRgn
CreateRectRgn
CreateDCW
PlayEnhMetaFile
IntersectClipRect
SetTextColor
RestoreDC
SaveDC
DPtoLP
LPtoDP
ExcludeClipRect
LineTo
MoveToEx
CreatePen
ExtTextOutW
EqualRgn
OffsetRgn
CombineRgn
SetRectRgn
Ellipse
CreateDIBPatternBrushPt
PatBlt
GetTextExtentPoint32W
GetTextMetricsW
SetMapMode
SelectClipRgn
GetClipBox
CreateBitmap
GetTextColor
GetBkColor
GetCurrentObject
SetWindowOrgEx
GetWindowOrgEx
CreatePolygonRgn
GetSystemPaletteEntries
SetBkMode
SetStretchBltMode
DeleteObject
TranslateCharsetInfo
SetTextAlign
ExtSelectClipRgn
GetObjectA
CreateDCA
RectVisible
GetDIBColorTable
GetStockObject
GetPaletteEntries
RpcStringBindingComposeW
UuidCreate
UuidToStringW
NdrClientCall2
RpcBindingFree
RpcStringFreeW
RpcBindingFromStringBindingW
AccessibleObjectFromWindow
LresultFromObject
AlphaBlend
GradientFill
TransparentBlt
GdipCreateBitmapFromStream
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectRect
GdipDrawImagePointRectI
GdipFillRectangle
GdipDeleteRegion
GdipSetClipRect
GdipSetClipRegion
GdipGetClip
GdipIsClipEmpty
GdipCreateRegion
GdipSetPixelOffsetMode
GdipCreateFromHDC
GdipDeleteMatrix
GdipTranslateRegionI
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipCreateMatrix
GdipGetDC
GdipReleaseDC
GdipSetCompositingMode
GdipCreateBitmapFromHBITMAP
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipGetCompositingMode
GdipSetCompositingQuality
GdipGetCompositingQuality
GdipDrawImageRectRectI
GdipCloneImage
GdipImageRotateFlip
GdipSetTextRenderingHint
GdipGetTextRenderingHint
GdipSetTextContrast
GdipGetTextContrast
GdipGetInterpolationMode
GdipSetInterpolationMode
GdipGetSmoothingMode
GdipSetWorldTransform
GdipGetWorldTransform
GdipCreateMatrix2
GdipResetWorldTransform
GdipSaveGraphics
GdipRestoreGraphics
GdipBitmapGetPixel
GdipCloneBitmapAreaI
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetSmoothingMode
GdipGetPixelOffsetMode
GdipDeletePen
GdipSetImageAttributesColorKeys
ImageList_DrawEx
ImmAssociateContext
ord8
??2@YAPAXI@Z
??3@YAXPAX@Z
?AddRef@BaseValue@NetUI@@QAEXXZ
?AutomateDataSource@FlexUI@@YGXPAUIDataSource@1@@Z
?CreateAtom@FlexValue@FlexUI@@SG_NPB_WAAVFlexValueSP@2@@Z
?CreateBoolean@FlexValue@FlexUI@@SG_N_NAAVFlexValueSP@2@@Z
?CreateByte@FlexValue@FlexUI@@SG_NEAAVFlexValueSP@2@@Z
?CreateChar@FlexValue@FlexUI@@SG_NDAAVFlexValueSP@2@@Z
?CreateDataSource@FlexValue@FlexUI@@SG_NPAUIDataSource@2@AAVFlexValueSP@2@@Z
?CreateDataSourceProxy@FlexUI@@YGPAUIFlexUIDataSourceProxy@@PAUIDataSource@1@@Z
?CreateDecimal@FlexValue@FlexUI@@SG_NPBUtagDEC@@AAVFlexValueSP@2@@Z
?CreateDouble@FlexValue@FlexUI@@SG_NNAAVFlexValueSP@2@@Z
?CreateFlexEvent@FlexValue@FlexUI@@SG_NAAVFlexValueSP@2@@Z
?CreateFlexListProxy@FlexUI@@YGPAUIFlexListProxy@@PAUIFlexList@1@@Z
?CreateInt16@FlexValue@FlexUI@@SG_NFAAVFlexValueSP@2@@Z
?CreateInt32@FlexValue@FlexUI@@SG_NHAAVFlexValueSP@2@@Z
?CreateInt64@FlexValue@FlexUI@@SG_N_JAAVFlexValueSP@2@@Z
?CreateLength@FlexValue@FlexUI@@SG_NPBUtagDEC@@W4FlexLengthType@2@AAVFlexValueSP@2@@Z
?CreateSByte@FlexValue@FlexUI@@SG_NCAAVFlexValueSP@2@@Z
?CreateSingle@FlexValue@FlexUI@@SG_NMAAVFlexValueSP@2@@Z
?CreateString@FlexValue@FlexUI@@SG_NPB_WAAVFlexValueSP@2@@Z
?CreateUInt16@FlexValue@FlexUI@@SG_NGAAVFlexValueSP@2@@Z
?CreateUInt32@FlexValue@FlexUI@@SG_NIAAVFlexValueSP@2@@Z
?CreateUInt64@FlexValue@FlexUI@@SG_N_KAAVFlexValueSP@2@@Z
?EnsureDataSourceState@@YGXPAUIDataSource@FlexUI@@@Z
?GetAtom@FlexValue@FlexUI@@QBEGXZ
?GetBoolean@FlexValue@FlexUI@@QBE_NXZ
?GetByte@FlexValue@FlexUI@@QBEEXZ
?GetChar@FlexValue@FlexUI@@QBE_WXZ
?GetDataSource@FlexValue@FlexUI@@QBEPAUIDataSource@2@XZ
?GetDecimal@FlexValue@FlexUI@@QBE?AUtagDEC@@XZ
?GetDouble@FlexValue@FlexUI@@QBENXZ
?GetInt16@FlexValue@FlexUI@@QBEFXZ
?GetInt32@FlexValue@FlexUI@@QBEHXZ
?GetInt64@FlexValue@FlexUI@@QBE_JXZ
?GetLength@FlexValue@FlexUI@@QBE?AUFlexLength@2@XZ
?GetList@FlexValue@FlexUI@@QBEPAUIFlexList@2@XZ
?GetSByte@FlexValue@FlexUI@@QBECXZ
?GetSingle@FlexValue@FlexUI@@QBEMXZ
?GetString@FlexValue@FlexUI@@QBEPB_WXZ
?GetType@FlexValue@FlexUI@@QBE?AW4FlexValueType@2@XZ
?GetUInt16@FlexValue@FlexUI@@QBEGXZ
?GetUInt32@FlexValue@FlexUI@@QBEIXZ
?GetUInt64@FlexValue@FlexUI@@QBE_KXZ
?HAlloc@NetUI@@YGPAXK@Z
?HFree@NetUI@@YGXPAX@Z
?IsDataSourceSubclassOf@FlexUI@@YG_NPAUIDataSourceDescription@1@I@Z
?Release@BaseValue@NetUI@@QAEXXZ
?ReleaseDataSource@FlexUI@@YGXPAUIFlexUIDataSourceProxy@@@Z
?ReleaseFlexList@FlexUI@@YGXPAUIFlexListProxy@@@Z
RunDevSetup
RunSetup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ