Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
99716cf60f95af5bf70008436dcbc12faf9822067999e9e05b266b05a800daa2_NeikiAnalytics.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
99716cf60f95af5bf70008436dcbc12faf9822067999e9e05b266b05a800daa2_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
99716cf60f95af5bf70008436dcbc12faf9822067999e9e05b266b05a800daa2_NeikiAnalytics.exe
Size
1.9MB
MD5
ef8866a87cd4a28ce8cddb49dbff4d50
SHA1
868d25c09ff099e99780baac9ce8facd2d9e53b8
SHA256
99716cf60f95af5bf70008436dcbc12faf9822067999e9e05b266b05a800daa2
SHA512
6925744308e5e416b2969ac5477d3279c0c73a2e7ee153659f8d259c25b0b25b148701abde2497c394c5687a803645059290d1b324b571d67f0f433651cb1f2f
SSDEEP
49152:pGtlqUWIU6ikVwASOlF5B7GQrpRs2bJF9eDBotswgFxdPsTKl:G+KvxwxaTKl
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryServer-PlatformCryptoOpenSSL-Win64-Shipping.pdb
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
??0FName@@QEAA@PEB_WW4EFindName@@@Z
?Free@FMemory@@SAXPEAX@Z
?Malloc@FMemory@@SAPEAX_KI@Z
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?Convert@Private@Core@UE@@YAPEA_WPEA_WHPEBW4UTF8CHAR@FGenericPlatformTypes@@H@Z
?Convert@Private@Core@UE@@YAPEAW4UTF8CHAR@FGenericPlatformTypes@@PEAW445@HPEB_WH@Z
?GetConvertedLength@Private@Core@UE@@YAHPEB_WPEBW4UTF8CHAR@FGenericPlatformTypes@@H@Z
?GetConvertedLength@Private@Core@UE@@YAHPEBW4UTF8CHAR@FGenericPlatformTypes@@PEB_WH@Z
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
??1FLogCategoryBase@@QEAA@XZ
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
??0IPlatformCryptoEncryptor@@QEAA@XZ
??0IPlatformCryptoDecryptor@@QEAA@XZ
WSACleanup
WSAGetLastError
send
recv
closesocket
WSASetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStdHandle
GetEnvironmentVariableW
GetFileType
WriteFile
GetModuleHandleW
GetProcAddress
MultiByteToWideChar
RtlVirtualUnwind
SetLastError
GetCurrentProcessId
GetSystemTimeAsFileTime
DeleteFiber
WideCharToMultiByte
ConvertFiberToThread
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
CloseHandle
FreeLibrary
LoadLibraryA
LoadLibraryW
FindClose
FindFirstFileW
FindNextFileW
GetLastError
DisableThreadLibraryCalls
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
CryptEnumProvidersW
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
DeregisterEventSource
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertFreeCertificateContext
BCryptGenRandom
strstr
memchr
__C_specific_handler
strrchr
strchr
memcmp
memcpy
__std_type_info_destroy_list
wcsstr
memset
memmove
_purecall
__CxxFrameHandler4
realloc
malloc
free
_crt_atexit
_cexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_errno
_configure_narrow_argv
_initterm
_initterm_e
_exit
signal
_seh_filter_dll
strerror_s
raise
_execute_onexit_table
_wfopen
fopen
ftell
fputs
__stdio_common_vsscanf
__stdio_common_vfprintf
_setmode
__stdio_common_vsprintf
fseek
fread
_fileno
fgets
fflush
ferror
feof
fclose
fwrite
__acrt_iob_func
__stdio_common_vswprintf
qsort
isspace
strncpy
_stricmp
strcmp
strspn
strncmp
strcspn
_strnicmp
_time64
_gmtime64_s
strtoul
atoi
strtol
getenv
_stat64i32
??0FSHA256HasherOpenSSL@@AEAA@XZ
??0FSHA256HasherOpenSSL@@QEAA@$$QEAU0@@Z
??1FSHA256HasherOpenSSL@@QEAA@XZ
??4FEncryptionContextOpenSSL@@QEAAAEAV0@$$QEAV0@@Z
??4FEncryptionContextOpenSSL@@QEAAAEAV0@AEBV0@@Z
??4FSHA256HasherOpenSSL@@QEAAAEAU0@$$QEAU0@@Z
?CalcSHA256@FEncryptionContextOpenSSL@@QEAA_NV?$TArrayView@$$CBEH@@AEAV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@@Z
?CreateDecryptor_AES_256_CBC@FEncryptionContextOpenSSL@@QEAA?AV?$TUniquePtr@VIPlatformCryptoDecryptor@@U?$TDefaultDelete@VIPlatformCryptoDecryptor@@@@@@V?$TArrayView@$$CBEH@@0@Z
?CreateDecryptor_AES_256_ECB@FEncryptionContextOpenSSL@@QEAA?AV?$TUniquePtr@VIPlatformCryptoDecryptor@@U?$TDefaultDelete@VIPlatformCryptoDecryptor@@@@@@V?$TArrayView@$$CBEH@@@Z
?CreateDecryptor_AES_256_GCM@FEncryptionContextOpenSSL@@QEAA?AV?$TUniquePtr@VIPlatformCryptoDecryptor@@U?$TDefaultDelete@VIPlatformCryptoDecryptor@@@@@@V?$TArrayView@$$CBEH@@00@Z
?CreateEncryptor_AES_256_CBC@FEncryptionContextOpenSSL@@QEAA?AV?$TUniquePtr@VIPlatformCryptoEncryptor@@U?$TDefaultDelete@VIPlatformCryptoEncryptor@@@@@@V?$TArrayView@$$CBEH@@0@Z
?CreateEncryptor_AES_256_ECB@FEncryptionContextOpenSSL@@QEAA?AV?$TUniquePtr@VIPlatformCryptoEncryptor@@U?$TDefaultDelete@VIPlatformCryptoEncryptor@@@@@@V?$TArrayView@$$CBEH@@@Z
?CreateEncryptor_AES_256_GCM@FEncryptionContextOpenSSL@@QEAA?AV?$TUniquePtr@VIPlatformCryptoEncryptor@@U?$TDefaultDelete@VIPlatformCryptoEncryptor@@@@@@V?$TArrayView@$$CBEH@@0@Z
?CreateKey_RSA@FEncryptionContextOpenSSL@@QEAAPEAXV?$TArrayView@$$CBEH@@00@Z
?CreatePseudoRandomBytes@FEncryptionContextOpenSSL@@QEAA?AW4EPlatformCryptoResult@@V?$TArrayView@EH@@@Z
?CreateRandomBytes@FEncryptionContextOpenSSL@@QEAA?AW4EPlatformCryptoResult@@V?$TArrayView@EH@@@Z
?CreateSHA256Hasher@FEncryptionContextOpenSSL@@QEAA?AUFSHA256HasherOpenSSL@@XZ
?DecryptPrivate_RSA@FEncryptionContextOpenSSL@@QEAAHV?$TArrayView@$$CBEH@@AEAV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@PEAX@Z
?DecryptPublic_RSA@FEncryptionContextOpenSSL@@QEAAHV?$TArrayView@$$CBEH@@AEAV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@PEAX@Z
?Decrypt_AES_256_CBC@FEncryptionContextOpenSSL@@QEAA?AV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@V?$TArrayView@$$CBEH@@00AEAW4EPlatformCryptoResult@@@Z
?Decrypt_AES_256_ECB@FEncryptionContextOpenSSL@@QEAA?AV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@V?$TArrayView@$$CBEH@@0AEAW4EPlatformCryptoResult@@@Z
?Decrypt_AES_256_GCM@FEncryptionContextOpenSSL@@QEAA?AV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@V?$TArrayView@$$CBEH@@000AEAW4EPlatformCryptoResult@@@Z
?DestroyKey_RSA@FEncryptionContextOpenSSL@@QEAAXPEAX@Z
?DigestSign_RS256@FEncryptionContextOpenSSL@@QEAA_NV?$TArrayView@$$CBEH@@AEAV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@PEAX@Z
?DigestVerify_PS256@FEncryptionContextOpenSSL@@QEAA_NV?$TArrayView@$$CBDH@@V?$TArrayView@$$CBEH@@1@Z
?DigestVerify_RS256@FEncryptionContextOpenSSL@@QEAA_NV?$TArrayView@$$CBEH@@0PEAX@Z
?EncryptPrivate_RSA@FEncryptionContextOpenSSL@@QEAAHV?$TArrayView@$$CBEH@@AEAV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@PEAX@Z
?EncryptPublic_RSA@FEncryptionContextOpenSSL@@QEAAHV?$TArrayView@$$CBEH@@AEAV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@PEAX@Z
?Encrypt_AES_256_CBC@FEncryptionContextOpenSSL@@QEAA?AV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@V?$TArrayView@$$CBEH@@00AEAW4EPlatformCryptoResult@@@Z
?Encrypt_AES_256_ECB@FEncryptionContextOpenSSL@@QEAA?AV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@V?$TArrayView@$$CBEH@@0AEAW4EPlatformCryptoResult@@@Z
?Encrypt_AES_256_GCM@FEncryptionContextOpenSSL@@QEAA?AV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@V?$TArrayView@$$CBEH@@00AEAV2@AEAW4EPlatformCryptoResult@@@Z
?Finalize@FSHA256HasherOpenSSL@@QEAA?AW4EPlatformCryptoResult@@V?$TArrayView@EH@@@Z
?GenerateKey_RSA@FEncryptionContextOpenSSL@@QEAA_NHAEAV?$TArray@EV?$TSizedDefaultAllocator@$0CA@@@@@00@Z
?GetKeySize_RSA@FEncryptionContextOpenSSL@@QEAAHPEAX@Z
?GetMaxDataSize_RSA@FEncryptionContextOpenSSL@@QEAAHPEAX@Z
?GetPublicKey_RSA@FEncryptionContextOpenSSL@@QEAAPEAXV?$TStringView@_W@@@Z
?Init@FSHA256HasherOpenSSL@@QEAA?AW4EPlatformCryptoResult@@XZ
?OutputByteLength@FSHA256HasherOpenSSL@@2IB
?Update@FSHA256HasherOpenSSL@@QEAA?AW4EPlatformCryptoResult@@V?$TArrayView@$$CBEH@@@Z
InitializeModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ