Extended Key Usages
ExtKeyUsageTimeStamping
Static task
static1
Behavioral task
behavioral1
Sample
9ec4a09502632e344aa4954df102d7a47c1f9947829722301e9518bedfe7c006_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
9ec4a09502632e344aa4954df102d7a47c1f9947829722301e9518bedfe7c006_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
9ec4a09502632e344aa4954df102d7a47c1f9947829722301e9518bedfe7c006_NeikiAnalytics.exe
Size
2.0MB
MD5
72702ec9d93eb06f4700e6f26bec4970
SHA1
0f0cdf600fcaf9609aecad470f592c6ca5e7ede1
SHA256
9ec4a09502632e344aa4954df102d7a47c1f9947829722301e9518bedfe7c006
SHA512
43d6ece47cd3817865e6648ca48d57821cc6c41ad71cbad6cf3c1698fce6e2338135980219655de3c10aa41e372500f119e4392c57b9b5b988fcecf6c44d9ca9
SSDEEP
12288:raLeigU54crBAEs/o70FaP5v9m/xk9QEXy9ossxliqYDW4:mLeS4wyty0aVVXfsPDW
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
P:\Target\x86\ship\osfclient\x-none\osf.pdb
OpenFileMappingW
MapViewOfFile
FormatMessageW
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
DecodePointer
VirtualQuery
GetSystemInfo
ResetEvent
UnhandledExceptionFilter
WerRegisterMemoryBlock
VirtualProtect
GetTickCount
GetCurrentProcessId
HeapSetInformation
QueryPerformanceCounter
LoadLibraryExA
IsProcessorFeaturePresent
InterlockedPushEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
IsWow64Process
GetVersionExW
SetUnhandledExceptionFilter
CreateWaitableTimerW
CancelWaitableTimer
SetWaitableTimer
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
LocalFree
LocalAlloc
OpenProcess
GetCurrentThread
TerminateProcess
GetCurrentProcess
CreateEventW
SleepEx
WaitForSingleObject
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExW
MulDiv
ReleaseSRWLockShared
AcquireSRWLockShared
GetTickCount64
CreateDirectoryW
GetFileAttributesExW
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
CopyFileW
DeleteFileW
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
CompareFileTime
GetSystemTimeAsFileTime
CloseHandle
ReleaseSemaphore
WaitForSingleObjectEx
CreateEventExW
CreateSemaphoreExW
LCIDToLocaleName
SystemTimeToFileTime
FindClose
FindFirstFileW
FindNextFileW
ReleaseMutex
OpenMutexW
CreateMutexExW
FindFirstFileExW
GetFileAttributesW
RemoveDirectoryW
SetFileAttributesW
GetModuleFileNameW
SetEvent
WaitForMultipleObjectsEx
CreateFileW
GetFileSizeEx
ReadFile
FindAtomW
UnmapViewOfFile
GetEnvironmentVariableW
GetLengthSid
RegQueryValueExW
EventWrite
SetThreadToken
OpenProcessToken
DuplicateTokenEx
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
RegCloseKey
EventRegister
EventUnregister
SetTokenInformation
ConvertStringSidToSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
DeregisterEventSource
RegisterEventSourceW
RegOpenKeyExA
RegOpenKeyExW
ReportEventW
GetRunningObjectTable
CoDisconnectObject
CoReleaseMarshalData
CoUnmarshalInterface
OleRegGetUserType
CreateItemMoniker
CoMarshalInterface
CoCreateInstance
CreateOleAdviseHolder
CoTaskMemFree
CreateStreamOnHGlobal
IIDFromString
CoCreateGuid
IsAccelerator
OleRegEnumVerbs
CoRegisterPSClsid
StringFromGUID2
OleRegGetMiscStatus
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayRedim
SafeArrayDestroy
SafeArrayCreate
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysStringLen
SysAllocString
OleCreatePropertyFrame
VariantCopyInd
VariantInit
SysFreeString
VariantCopy
VarBstrCat
SafeArrayCreateVector
SafeArrayGetVartype
SafeArrayPtrOfIndex
SafeArrayCopy
VariantClear
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetDim
LoadTypeLi
LoadRegTypeLi
memcmp
wcsrchr
wcsstr
wcschr
__RTDynamicCast
__std_exception_destroy
__std_exception_copy
__std_type_info_hash
memmove
memcpy
memset
__std_terminate
_CxxThrowException
__CxxFrameHandler3
__std_type_info_compare
__std_type_info_destroy_list
_except_handler4_common
__vcrt_InitializeCriticalSectionEx
__telemetry_main_return_trigger
__telemetry_main_invoke_trigger
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
_Query_perf_counter
_Query_perf_frequency
?_Xbad_alloc@std@@YAXXZ
malloc
free
terminate
_invalid_parameter_noinfo
_errno
_seh_filter_dll
_initterm
_invalid_parameter_noinfo_noreturn
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_initterm_e
wcsncmp
isupper
wcscpy_s
wcscspn
tolower
_wcsicmp
iswdigit
wcscat_s
_wcsnicmp
wcsncpy_s
_time64
_itow_s
_ui64tow_s
_wtol
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf_s
__stdio_common_vswscanf
__stdio_common_vswprintf
_except1
__initialize_lconv_for_unsigned_char
CreateDIBSection
SelectObject
DeleteObject
CreateCompatibleDC
BitBlt
CreateRectRgnIndirect
SetWindowOrgEx
SetViewportOrgEx
CreateDCW
LPtoDP
SetMapMode
SaveDC
RestoreDC
GetDeviceCaps
DeleteDC
GetObjectW
CreatePolygonRgn
CreateSolidBrush
SetRectRgn
CombineRgn
CreateRectRgn
AlphaBlend
WSACleanup
getaddrinfo
freeaddrinfo
WSAStartup
?CreateAppCommandSolutionRef@@YGJPB_WABUAppVersion@@W4OsfStoreType@@000PAUIOsfAppCommandReference@Osf@@PAPAUIOsfSolutionReference@@@Z
?CreateCacheForExtensionResource@@YGXPB_WPBUIWebAddInStringCollection@Osf@@I$$QAV?$function@$$A6GXHAAV?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@Z@std@@@Z
?CreateCacheForPreinstalledApps@@YGXXZ
?CreateSolutionRef@@YGJPB_WABUAppVersion@@W4OsfStoreType@@000_NPAPAUIOsfSolutionReference@@@Z
?CreateSolutionRefFromMarketplaces@@YGJABUOsfMarketplace@@0_NPAPAUIOsfSolutionReference@@@Z
?CreateSolutionRefFromPersistence@@YGJPBUIOsfExtensionPersistence@@_NPAPAUIOsfSolutionReference@@@Z
?FillMarketplacesFromSolutionRef@@YGJPBUIOsfSolutionReference@@AAUOsfMarketplace@@1@Z
?GetOsfIntlDllInstance@@YGPAUHINSTANCE__@@XZ
?GetServiceManager@@YGPAVServiceManager@@XZ
?IsStorageCompatibleWithOsfSolutionReference@@YG_NPBUIOsfSolutionReference@@PBUIOsfExtensionPersistence@@@Z
?OSFInitialize@@YGJW4OsfHost@@PAUIOfficeSolutionFrameworkHost@@PAPAUIOfficeSolutionFramework@@@Z
?OSFLoadString@@YGHIPA_WH@Z
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
_CreateOsfRibbonManager@12
_DoHostControlledWefGalleryWebDialog@32
_DoWefGalleryWebDialogInitTab@16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ