Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
701b4efbf4b43fbaa22d6eec268be8991ff2402f37cb81f068021cc8baff7323_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
701b4efbf4b43fbaa22d6eec268be8991ff2402f37cb81f068021cc8baff7323_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Target
701b4efbf4b43fbaa22d6eec268be8991ff2402f37cb81f068021cc8baff7323_NeikiAnalytics.exe
Size
2.5MB
MD5
9ca9783e5c940e3234ad68322afe6120
SHA1
5f577ab5ec196f35ea4f94163491f5e278fa355e
SHA256
701b4efbf4b43fbaa22d6eec268be8991ff2402f37cb81f068021cc8baff7323
SHA512
b854280c3ec0648cec213db5440c5f9325a4b22839f2f89c8e91a9bcbd1403aa9d28482735bcc837ef4c3cd6ab640c78fbab4514ea408f3191049d37c96a6492
SSDEEP
49152:EpojrMxnpW1ClXsQkZqLXhoHWYHXUMcVl+:EponOnpW1ClXsQkZqLXhoHWYknA
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\Users\Eric\Documents\Redline\Rural Billing\Release\Rubill.pdb
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
InternetCheckConnectionW
FindNextUrlCacheEntryW
DeleteUrlCacheEntryW
FindFirstUrlCacheEntryW
USPS4CB
?RowsAffected@SACommand@@QAE_KXZ
?Execute@SACommand@@UAEXXZ
?Rollback@SAConnection@@QAEXXZ
?Commit@SAConnection@@QAEXXZ
?setAutoCommit@SAConnection@@QAEXW4eSAAutoCommit@@@Z
?Disconnect@SAConnection@@QAEXXZ
?Connect@SAConnection@@QAEXABVSAString@@00W4eSAClient@@P6AXAAV1@W4eSAConnectionHandlerType@@@Z@Z
?isAlive@SAConnection@@QBE_NXZ
?isConnected@SAConnection@@QBE_NXZ
??1SAConnection@@UAE@XZ
??0SAConnection@@QAE@XZ
??YSAString@@QAEABV0@PB_W@Z
?ErrText@SAException@@QBE?AVSAString@@XZ
?setAsString@SAValue@@QAEAAVSAString@@XZ
?setAsNumeric@SAValue@@QAEAAVSANumeric@@XZ
?setAsDouble@SAValue@@QAEAANXZ
?setAsLong@SAValue@@QAEAAHXZ
?setAsShort@SAValue@@QAEAAFXZ
?setAsNull@SAValue@@QAEXXZ
?asString@SAValueRead@@QBE?AVSAString@@XZ
?asDateTime@SAValueRead@@QBE?AVSADateTime@@XZ
?asDouble@SAValueRead@@QBENXZ
?asLong@SAValueRead@@QBEHXZ
?asBool@SAValueRead@@QBE_NXZ
??0SAString@@QAE@PBD@Z
?FetchFirst@SACommand@@QAE_NXZ
?FetchPrior@SACommand@@QAE_NXZ
?FetchNext@SACommand@@QAE_NXZ
?isResultSet@SACommand@@QAE_NXZ
?setCommandText@SACommand@@QAEXABVSAString@@W4eSACommandType@@@Z
?setConnection@SACommand@@QAEXPAVSAConnection@@@Z
??1SACommand@@UAE@XZ
??0SACommand@@QAE@XZ
?GetSecond@SADateTime@@QBEHXZ
?GetMinute@SADateTime@@QBEHXZ
?GetHour@SADateTime@@QBEHXZ
?GetDay@SADateTime@@QBEHXZ
?GetMonth@SADateTime@@QBEHXZ
?GetYear@SADateTime@@QBEHXZ
??4SANumeric@@QAEAAV0@N@Z
??4SAString@@QAEABV0@PB_W@Z
??BSAString@@QBEPB_WXZ
??0SAString@@QAE@PB_W@Z
?AutoCommit@SAConnection@@QBE?AW4eSAAutoCommit@@XZ
?asLongBinary@SAValueRead@@QBE?AVSAString@@XZ
?Field@SACommand@@QAEAAVSAField@@ABVSAString@@@Z
??BSAString@@QBEPBXXZ
?GetBinaryLength@SAString@@QBEIXZ
?setAsLongBinary@SAValue@@QAEAAVSAString@@P6AIAAW4eSAPieceType@@PAXI1@ZI1@Z
?Param@SACommand@@QAEAAVSAParam@@ABVSAString@@@Z
??1SAString@@QAE@XZ
??4SAString@@QAEABV0@ABV0@@Z
??0SAString@@QAE@PBXI@Z
?FetchLast@SACommand@@QAE_NXZ
ord12176
ord8920
ord8912
ord13754
ord6219
ord1674
ord1671
ord4697
ord5808
ord5814
ord12625
ord13072
ord13073
ord14239
ord1046
ord3009
ord285
ord3846
ord500
ord12586
ord1142
ord6549
ord6225
ord501
ord1143
ord4093
ord6316
ord2457
ord8345
ord3817
ord7815
ord2766
ord8171
ord13473
ord3833
ord1673
ord1669
ord1670
ord1668
ord13414
ord5850
ord3849
ord316
ord310
ord12585
ord4817
ord13251
ord498
ord6956
ord14606
ord2885
ord973
ord971
ord12429
ord1449
ord11972
ord2899
ord5886
ord12351
ord8756
ord5112
ord306
ord2458
ord13048
ord12762
ord1689
ord3797
ord5074
ord8032
ord3804
ord2391
ord2246
ord5589
ord6977
ord6566
ord4882
ord2522
ord3957
ord3882
ord6489
ord6559
ord6486
ord6812
ord4881
ord2520
ord3954
ord450
ord13293
ord13985
ord13062
ord4571
ord4649
ord4648
ord1108
ord13070
ord890
ord1391
ord362
ord1068
ord997
ord1474
ord540
ord3182
ord3869
ord1171
ord6865
ord6868
ord13028
ord9468
ord7654
ord2223
ord4323
ord555
ord8509
ord1659
ord1676
ord3237
ord494
ord5512
ord12784
ord6555
ord5514
ord11962
ord823
ord13255
ord1354
ord281
ord484
ord13961
ord13254
ord13964
ord7109
ord5893
ord4819
ord6495
ord363
ord10250
ord1069
ord7486
ord5763
ord3803
ord6499
ord11014
ord9039
ord5962
ord365
ord4091
ord6561
ord9528
ord6825
ord3246
ord3362
ord13901
ord1433
ord503
ord1144
ord5583
ord4715
ord4735
ord3809
ord3694
ord1692
ord7027
ord509
ord4094
ord5816
ord13648
ord8072
ord7441
ord8124
ord3806
ord975
ord2012
ord12612
ord1451
ord10428
ord11905
ord3171
ord5837
ord7891
ord4225
ord8067
ord9132
ord7509
ord6634
ord632
ord14258
ord9264
ord12162
ord1238
ord7967
ord2750
ord13087
ord13289
ord14047
ord4330
ord13336
ord13885
ord364
ord4143
ord8776
ord2215
ord7076
ord370
ord2624
ord2651
ord4113
ord4179
ord4209
ord4251
ord4285
ord4255
ord1076
ord3842
ord8339
ord12457
ord8172
ord3939
ord8990
ord12171
ord12098
ord12078
ord14578
ord13981
ord9298
ord11587
ord7488
ord294
ord3580
ord13469
ord3174
ord5033
ord13235
ord5034
ord6130
ord1788
ord5934
ord13700
ord13709
ord5939
ord13707
ord5938
ord2557
ord4495
ord5955
ord8209
ord5369
ord4587
ord12081
ord11495
ord10402
ord13282
ord13924
ord6263
ord7926
ord1405
ord13442
ord758
ord1306
ord754
ord3215
ord13627
ord1302
ord3210
ord4440
ord5164
ord5168
ord1854
ord7139
ord515
ord2070
ord10840
ord12461
ord12178
ord8399
ord14591
ord11431
ord9214
ord9238
ord12103
ord7918
ord1152
ord2060
ord5747
ord11509
ord9204
ord9719
ord11796
ord11503
ord8832
ord3844
ord11801
ord9176
ord9303
ord7506
ord7313
ord11122
ord13994
ord7314
ord2142
ord8527
ord3684
ord1521
ord7379
ord922
ord3238
ord6248
ord5037
ord5036
ord6249
ord4108
ord1928
ord12711
ord4487
ord10498
ord1411
ord12217
ord2594
ord9253
ord3054
ord9225
ord7627
ord7378
ord914
ord8977
ord11235
ord11021
ord9042
ord11333
ord10570
ord11169
ord11932
ord11935
ord11933
ord11934
ord6309
ord1408
ord11000
ord12216
ord7626
ord268
ord12754
ord8773
ord6801
ord3359
ord6395
ord13962
ord2169
ord7327
ord7656
ord8811
ord8365
ord4171
ord6973
ord7073
ord511
ord1149
ord7504
ord9377
ord3605
ord7137
ord6607
ord3932
ord4885
ord2526
ord14377
ord4227
ord8746
ord6880
ord8174
ord8244
ord8338
ord5312
ord5441
ord5436
ord2725
ord14197
ord6303
ord13117
ord8815
ord14129
ord3131
ord3338
ord4969
ord4939
ord4991
ord5006
ord4951
ord4945
ord5000
ord4957
ord4963
ord5016
ord4977
ord4930
ord1774
ord4112
ord2067
ord5080
ord5085
ord8317
ord3133
ord6276
ord13216
ord12148
ord4032
ord4017
ord4792
ord8806
ord14315
ord8145
ord3311
ord13480
ord11162
ord9002
ord8957
ord14441
ord3230
ord3356
ord8996
ord8941
ord2618
ord2113
ord11130
ord2703
ord3066
ord11484
ord9291
ord8997
ord12676
ord13487
ord4016
ord4509
ord14298
ord12739
ord7236
ord665
ord8417
ord8418
ord8406
ord12468
ord5165
ord3173
ord2303
ord5458
ord5620
ord11323
ord4919
ord4909
ord1736
ord1761
ord1715
ord1750
ord9158
ord10001
ord4313
ord11519
ord14394
ord11256
ord12203
ord12112
ord9245
ord14580
ord11762
ord11091
ord2643
ord10169
ord8448
ord12993
ord11436
ord9005
ord1260
ord11518
ord7562
ord3256
ord3627
ord3644
ord12482
ord10527
ord9581
ord3621
ord3903
ord14265
ord14263
ord3888
ord3856
ord5038
ord13226
ord2692
ord1794
ord4089
ord4140
ord4141
ord7907
ord5756
ord5688
ord14379
ord14372
ord4173
ord13973
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LocalAlloc
LocalFree
FormatMessageW
lstrlenW
GetComputerNameW
GetLocaleInfoW
GetCurrentProcess
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CreateMutexW
GetCurrentDirectoryW
GetLastError
GetWindowsDirectoryW
GetVolumeInformationW
MoveFileW
SetThreadExecutionState
lstrcpyA
GetTickCount
GlobalLock
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GlobalUnlock
TransmitCommChar
SetCommTimeouts
SetCommState
PurgeComm
GetCommState
SetupComm
WriteFile
ReadFile
CreateFileW
GetTimeZoneInformation
GetProcAddress
GetModuleHandleW
OutputDebugStringW
GetVersionExA
FlushInstructionCache
GetCurrentThreadId
WaitForSingleObject
CloseHandle
Sleep
WideCharToMultiByte
MultiByteToWideChar
GetWindowRect
GetClientRect
GetFocus
GetParent
SetWindowLongW
RedrawWindow
IsWindowVisible
GetWindowLongW
EnableWindow
PostMessageW
SendMessageW
DrawFrameControl
GetWindowThreadProcessId
EnumWindows
SetForegroundWindow
SetActiveWindow
GetDialogBaseUnits
AttachThreadInput
PeekMessageW
SetRect
wsprintfW
UpdateWindow
GetSubMenu
LoadMenuW
FillRect
TranslateAcceleratorW
LoadAcceleratorsW
MessageBoxW
FindWindowW
GetForegroundWindow
LoadBitmapW
DrawStateW
DrawTextW
GetKeyState
GetClipboardData
CloseClipboard
OpenClipboard
DispatchMessageW
TranslateMessage
SetCursor
GetDesktopWindow
SystemParametersInfoW
SystemParametersInfoA
GetIconInfo
DrawIconEx
LoadImageW
LoadCursorW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
PtInRect
EqualRect
IsRectEmpty
OffsetRect
InflateRect
CopyRect
SetRectEmpty
GetSysColorBrush
GetSysColor
ClientToScreen
GetCursorPos
InvalidateRect
SetWindowRgn
ReleaseDC
GetDC
GetSystemMetrics
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetCapture
IsIconic
RegisterClassExW
MessageBeep
CreateCompatibleDC
CreateCompatibleBitmap
CombineRgn
GetPixel
CreateFontIndirectW
BitBlt
SelectObject
FloodFill
Ellipse
GetTextExtentPoint32W
GetDeviceCaps
CreatePolygonRgn
GetObjectW
StretchBlt
OffsetRgn
GetStockObject
FrameRgn
EqualRgn
DeleteObject
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
GetPrinterW
EnumJobsW
SetJobW
OpenPrinterW
ord203
EnumPrintersW
ClosePrinter
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegCloseKey
ShellExecuteW
SHGetFolderPathW
ShellExecuteExW
_TrackMouseEvent
ImageList_GetIconSize
ImageList_AddMasked
ImageList_Draw
ImageList_SetBkColor
ImageList_Add
PathFileExistsW
PathFindFileNameW
OleRun
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoUninitialize
CoInitialize
GetErrorInfo
VariantCopy
VariantInit
SysStringLen
SysAllocString
VariantClear
SysAllocStringByteLen
SysStringByteLen
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromStr
VarUdateFromDate
VarBstrFromDate
SysFreeString
__CxxFrameHandler3
__current_exception
_except_handler4_common
_purecall
memmove
wcsstr
memcpy
memset
__std_terminate
_CxxThrowException
__current_exception_context
_wtoi
_wtof
wcstombs
atol
atoi
_wtol
atof
floor
__setusermatherr
modf
ceil
_libm_sse2_pow_precise
_crt_atexit
_controlfp_s
_register_onexit_function
terminate
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_exit
exit
_initterm_e
_initterm
_initialize_wide_environment
_errno
_configure_wide_argv
_set_app_type
_seh_filter_exe
_initialize_onexit_table
_get_wide_winmain_command_line
_invalid_parameter_noinfo
wcsftime
_localtime64_s
_time64
_mktime64
free
calloc
malloc
_set_new_mode
_recalloc
strcpy_s
_wcsdup
wcstok
strncpy
_putenv
__p__commode
_set_fmode
__stdio_common_vswprintf_s
__stdio_common_vswprintf
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ