Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
63176bf00dca2b9ac83974d04ee427be75ad527b218894f4b31eff701731898e_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
63176bf00dca2b9ac83974d04ee427be75ad527b218894f4b31eff701731898e_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
63176bf00dca2b9ac83974d04ee427be75ad527b218894f4b31eff701731898e_NeikiAnalytics.exe
Size
120KB
MD5
f287229b9fe4d58ecad5a8762e179660
SHA1
ff38b7e2210ecb55c09e59adea6dbff1db62cc20
SHA256
63176bf00dca2b9ac83974d04ee427be75ad527b218894f4b31eff701731898e
SHA512
c53e720ce8426c76695521487481ddd1454a92cc4a3c20a01fad1f94b77b6a8fd4a4edc02f8cbc3a69e39050316847d5332c2c3a50825107f2eb499ae2a3e03c
SSDEEP
3072:DZR9vOWNKND78+eXCbu7l/Am2U+aixK74BpUjz+YZj:NfvOWNeBbEl/P2UvcLK6Y
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
plugin-service-runner.pdb
??$DecodeString@$00U?$BaseReplacePolicy@_W@detail@sbis@@@sbis@@YA?AVStringView@0@ABV?$Allocator@_W@0@PBDIABU?$BaseReplacePolicy@_W@detail@0@@Z
??$FormatImpl@_W@detail@sbis@@YA?AVStringView@1@ABV?$Allocator@_W@1@ABV21@QBQBV?$LazyToStringable@_W@01@IQAVToStringCachePosition@01@@Z
??0?$Allocator@_W@sbis@@QAE@XZ
??0?$ArrayView@_W@sbis@@QAE@PB_WI@Z
??0?$BasicStringView@_W@detail@sbis@@QAE@PB_W@Z
??0IniParser@sbis@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4Type@Encoding@1@_N@Z
??0LogRecord@log@sbis@@AAE@W4LogLevel@logging@2@@Z
??1?$Allocator@_W@sbis@@UAE@XZ
??1IniParser@sbis@@QAE@XZ
??1LogRecord@log@sbis@@QAE@XZ
?CheckKey@IniParser@sbis@@QBE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?CheckLevel@LogRecord@log@sbis@@SA_NW4LogLevel@logging@3@@Z
?ConcatenateImpl@LogRecord@log@sbis@@AAEXIQBQBV?$LazyToStringable@_W@detail@3@I@Z
?CreateDirByFileName@filesystem@sbis@@YA_NABVpath@1boost@@@Z
?Data@?$Allocator@_W@sbis@@QBEPA_WXZ
?ErrorMessage@Exception@sbis@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?ErrorMsg@sbis@@YAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?ErrorMsg@sbis@@YAXVStringView@1@@Z
?ExpandEnvVars@sbis@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABVStringView@1@@Z
?ExtractCurrentDirectory@filesystem@sbis@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?FileExist@filesystem@sbis@@YA_NABVpath@1boost@@@Z
?GetCurrentExecutablePath@sbis@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?IsFullPath@filesystem@sbis@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?IsValid@LogRecord@log@sbis@@QBE_NXZ
?Now@LogTimestamp@log@sbis@@SA?AU123@XZ
?PathStr@filesystem@sbis@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABVpath@1boost@@@Z
?Reserve@?$Allocator@_W@sbis@@QBEXI@Z
?RestoreFullPath@filesystem@sbis@@YA?AVpath@1boost@@ABV314@0@Z
?SetTimestamp@LogRecord@log@sbis@@QAEXABULogTimestamp@23@@Z
?ShrinkToFit@?$Allocator@_W@sbis@@UBEXXZ
?Submit@log@sbis@@YAX$$QAVLogRecord@12@@Z
?ToString@?$Stringify@VStringView@sbis@@X@sbis@@SAXABV?$Allocator@_W@2@ABVStringView@2@@Z
?ToString@?$Stringify@_KX@sbis@@SAXABV?$Allocator@_W@2@_K@Z
?ValueString@IniParser@sbis@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@@Z
?WarningMsg@sbis@@YAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?size@?$ArrayView@_W@sbis@@QBEIXZ
QuickExit
??0ModuleInitializerHandle@ld@sbis@@QAE@XZ
??1ModuleInitializerHandle@ld@sbis@@UAE@XZ
?Add@ModuleCallbackRegistry@ld@sbis@@QAEXABV?$shared_ptr@$$CBVModuleInitializerHandle@ld@sbis@@@std@@@Z
?HasNativeInitializer@AbstractModuleHandle@ld@sbis@@UBE_NXZ
?Instance@ModuleCallbackRegistry@ld@sbis@@SAAAV123@XZ
?ModuleId@ModuleInitializerHandle@ld@sbis@@UBE?AUuuid@uuids@boost@@XZ
?OnCheck@ModuleInitializerHandle@ld@sbis@@UBE_NAAUCheckEventAnswer@3@@Z
?OnCleanup@ModuleInitializerHandle@ld@sbis@@UBE_NAAUCleanupEventAnswer@3@@Z
?OnEndLoadApplication@ModuleInitializerHandle@ld@sbis@@UBE_NXZ
?OnEndLoadKernelModules@ModuleInitializerHandle@ld@sbis@@UBE_NAAUEndLoadEventAnswer@3@@Z
?OnKernelCleanup@ModuleInitializerHandle@ld@sbis@@UBE_NAAUCleanupEventAnswer@3@@Z
?OnUnload@ModuleInitializerHandle@ld@sbis@@UBE_NAAUCleanupEventAnswer@3@@Z
?Remove@ModuleCallbackRegistry@ld@sbis@@QAEXVStringView@3@@Z
AreFileApisANSI
CloseHandle
CreateEventW
CreateFileW
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FindClose
FindFirstFileW
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetExitCodeProcess
GetFileAttributesExW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetLastError
GetLocaleInfoEx
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LeaveCriticalSection
LocalFree
QueryPerformanceCounter
ResetEvent
SetEvent
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
ShellExecuteW
?_Syserror_map@std@@YAPBDH@Z
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Winerror_map@std@@YAHH@Z
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
_Cnd_do_broadcast_at_thread_exit
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Query_perf_counter
_Query_perf_frequency
_Thrd_detach
_Thrd_sleep
_Xtime_get_ticks
ChangeServiceConfig2W
ChangeServiceConfigW
CloseServiceHandle
ConvertSecurityDescriptorToStringSecurityDescriptorW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CreateServiceW
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
QueryServiceObjectSecurity
QueryServiceStatus
SetServiceObjectSecurity
StartServiceW
_CxxThrowException
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_destroy_list
_except_handler4_common
_purecall
memcpy
memmove
memset
_callnewh
free
malloc
_beginthreadex
_cexit
_configure_narrow_argv
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_seh_filter_dll
terminate
___lc_codepage_func
iswspace
strlen
wcslen
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ