Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
b64c88325da8b0133103a7edcb30f9a900ce387c9aa29e9d60789f37615c80d5_NeikiAnalytics.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
b64c88325da8b0133103a7edcb30f9a900ce387c9aa29e9d60789f37615c80d5_NeikiAnalytics.dll
Resource
win10v2004-20240508-en
Target
b64c88325da8b0133103a7edcb30f9a900ce387c9aa29e9d60789f37615c80d5_NeikiAnalytics.exe
Size
105KB
MD5
c778d7f0441000398b7aad9103c36420
SHA1
bdb86a6fa003180918238ba62d0618c5f1f9df31
SHA256
b64c88325da8b0133103a7edcb30f9a900ce387c9aa29e9d60789f37615c80d5
SHA512
2e7d62c06e81dc03c90f96dd380c9df96e74dab322239fd24cf6105a3b7a8976d4bf90d525fdf6d5d102d9f3691ced7d7e9333fff9aa63c9480c5b549f26d072
SSDEEP
1536:YkUlSCbkCMW664EJ1LqjO9esIXq9eFHUAf9HeIMTWmg9Ppki6EPAyVFc7TIxTl:YZlSCK0VqjO9caMFHt1BWg9RkkBzc4l
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
FactoryServer-LocalizableMessageBlueprint.pdb
?HandleAtomicsFailure@FWindowsPlatformAtomics@@KAXPEB_WZZ
?Free@FMemory@@SAXPEAX@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?DoSetup@FThreadSafeStaticStatBase@@IEBAPEBUTStatIdData@@PEBDPEB_W001_N2W4Type@EStatDataType@@22W4EMemoryCounterRegion@FWindowsPlatformMemory@@@Z
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
??0FString@@QEAA@PEB_W@Z
?Reset@FString@@QEAAXH@Z
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?GetTransientPackage@@YAPEAVUPackage@@XZ
?StaticAllocateObject@@YAPEAVUObject@@PEBVUClass@@PEAV1@VFName@@W4EObjectFlags@@W4EInternalObjectFlags@@_NPEA_NPEAVUPackage@@@Z
?Get@FObjectInitializer@@SAAEAV1@XZ
?ConstructUFunction@UECodeGen_Private@@YAXPEAPEAVUFunction@@AEBUFFunctionParams@1@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUClass@UECodeGen_Private@@YAXAEAPEAVUClass@@AEBUFClassParams@1@@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?GetFullName@UObjectBaseUtility@@QEBA?AVFString@@PEBVUObject@@W4EObjectFullNameFlags@@@Z
?GetPrivateStaticClass@UObject@@CAPEAVUClass@@XZ
?AddReferencedObjects@UObject@@SAXPEAV1@AEAVFReferenceCollector@@@Z
?CallFunctionByNameWithArguments@UObject@@QEAA_NPEB_WAEAVFOutputDevice@@PEAV1@_N@Z
?RegisterFunctions@FNativeFunctionRegistrar@@SAXPEAVUClass@@PEBUFNameNativePtrPair@@H@Z
??4FWeakObjectPtr@@QEAAXPEBVUObject@@@Z
?GetPrivateStaticClassBody@@YAXPEB_W0AEAPEAVUClass@@P6AXXZIIW4EClassFlags@@W4EClassCastFlags@@0P6AXAEBVFObjectInitializer@@@ZP6APEAVUObject@@AEAVFVTableHelper@@@Z$$QEAUFUObjectCppClassStaticFunctions@@P6APEAV1@XZP6APEAV1@XZ@Z
?StaticClass@FObjectPropertyBase@@SAPEAVFFieldClass@@XZ
?Step@FFrame@@QEAAXPEAVUObject@@QEAX@Z
?StepExplicitProperty@FFrame@@QEAAXQEAXPEAVFProperty@@@Z
?Z_Construct_UClass_UObject_NoRegister@@YAPEAVUClass@@XZ
?CheckDefaultSubobjectsInternal@UObject@@MEBA_NXZ
?ProcessEvent@UObject@@UEAAXPEAVUFunction@@PEAX@Z
?BuildSubobjectMapping@UObject@@UEBAXPEAV1@AEAV?$TMap@PEAVUObject@@PEAV1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@PEAVUObject@@PEAV1@$0A@@@@@@Z
?PreDestroyFromReplication@UObject@@UEAAXXZ
?PostNetReceive@UObject@@UEAAXXZ
?PreNetReceive@UObject@@UEAAXXZ
?IsSupportedForNetworking@UObject@@UEBA_NXZ
?IsFullNameStableForNetworking@UObject@@UEBA_NXZ
?IsNameStableForNetworking@UObject@@UEBA_NXZ
?RegisterReplicationFragments@UObject@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?GetReplicatedCustomConditionState@UObject@@UEBAXAEAVFCustomPropertyConditionState@@@Z
?GetLifetimeReplicatedProps@UObject@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?TagSubobjects@UObject@@UEAAXW4EObjectFlags@@@Z
?IsSafeForRootSet@UObject@@UEBA_NXZ
?IsLocalizedResource@UObject@@UEBA_NXZ
?GetPrimaryAssetId@UObject@@UEBA?AUFPrimaryAssetId@@XZ
?IsAsset@UObject@@UEBA_NXZ
?GetAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetResourceSizeEx@UObject@@UEAAXAEAUFResourceSizeEx@@@Z
?GetWorld@UObject@@UEBAPEAVUWorld@@XZ
?Rename@UObject@@UEAA_NPEB_WPEAV1@I@Z
?GetPreloadDependencies@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsDestructionThreadSafe@UObject@@UEBA_NXZ
?NeedsLoadForTargetPlatform@UObject@@UEBA_NPEBVITargetPlatform@@@Z
?NeedsLoadForServer@UObject@@UEBA_NXZ
?NeedsLoadForClient@UObject@@UEBA_NXZ
?Serialize@UObject@@UEAAXAEAVFArchive@@@Z
?Serialize@UObject@@UEAAXVFStructuredArchiveRecord@@@Z
?FinishDestroy@UObject@@UEAAXXZ
?BeginDestroy@UObject@@UEAAXXZ
?PostLoadSubobjects@UObject@@UEAAXPEAUFObjectInstancingGraph@@@Z
?PostLoad@UObject@@UEAAXXZ
?PreSave@UObject@@UEAAXPEBVITargetPlatform@@@Z
?PreSave@UObject@@UEAAXVFObjectPreSaveContext@@@Z
?PostSaveRoot@UObject@@UEAAX_N@Z
?PostSaveRoot@UObject@@UEAAXVFObjectPostSaveRootContext@@@Z
?PreSaveRoot@UObject@@UEAA_NPEB_W@Z
?PreSaveRoot@UObject@@UEAAXVFObjectPreSaveRootContext@@@Z
?PostReinitProperties@UObject@@UEAAXXZ
?PostInitProperties@UObject@@UEAAXXZ
?CreateCluster@UObjectBaseUtility@@UEAAXXZ
?CanBeInCluster@UObjectBaseUtility@@UEBA_NXZ
?GetFNameForStatID@UObjectBase@@UEBA?AVFName@@XZ
?DeferredRegister@UObjectBase@@MEAAXPEAVUClass@@PEB_W1@Z
??0UBlueprintFunctionLibrary@@QEAA@AEBVFObjectInitializer@@@Z
??0UBlueprintFunctionLibrary@@QEAA@AEAVFVTableHelper@@@Z
??1UBlueprintFunctionLibrary@@UEAA@XZ
?Z_Construct_UClass_UBlueprintFunctionLibrary@@YAPEAVUClass@@XZ
?GetFunctionCallspace@UBlueprintFunctionLibrary@@UEAAHPEAVUFunction@@PEAUFFrame@@@Z
?GetPrivateStaticClass@UBlueprintFunctionLibrary@@CAPEAVUClass@@XZ
??0FLocalizableMessage@@QEAA@XZ
??1FLocalizableMessage@@QEAA@XZ
?Z_Construct_UScriptStruct_FLocalizableMessage@@YAPEAVUScriptStruct@@XZ
?Get@ILocalizableMessageModule@@SAAEAV1@XZ
?Localize@FLocalizableMessageProcessor@@QEAA?AVFText@@AEBUFLocalizableMessage@@AEBUFLocalizationContext@@@Z
??1FLocalizableMessageParameterEntry@@QEAA@XZ
memset
__current_exception
__std_type_info_destroy_list
__C_specific_handler
__current_exception_context
memcpy
__CxxFrameHandler4
_initterm
_cexit
_crt_at_quick_exit
_crt_atexit
terminate
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_execute_onexit_table
_register_onexit_function
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
RtlCaptureContext
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
QueryPerformanceCounter
GetModuleHandleW
IsProcessorFeaturePresent
??$StaticClass@VULocalizableMessageLibrary@@@@YAPEAVUClass@@XZ
??0ULocalizableMessageLibrary@@QEAA@AEAVFVTableHelper@@@Z
??0ULocalizableMessageLibrary@@QEAA@AEBVFObjectInitializer@@@Z
??1ULocalizableMessageLibrary@@UEAA@XZ
??_FULocalizableMessageLibrary@@QEAAXXZ
?Conv_LocalizableMessageToText@ULocalizableMessageLibrary@@SA?AVFText@@PEAVUObject@@AEBUFLocalizableMessage@@@Z
?GetPrivateStaticClass@ULocalizableMessageLibrary@@CAPEAVUClass@@XZ
?IsEmpty_LocalizableMessage@ULocalizableMessageLibrary@@SA_NAEBUFLocalizableMessage@@@Z
?Reset_LocalizableMessage@ULocalizableMessageLibrary@@SAXAEAUFLocalizableMessage@@@Z
?Z_Construct_UClass_ULocalizableMessageLibrary@@YAPEAVUClass@@XZ
?Z_Construct_UClass_ULocalizableMessageLibrary_NoRegister@@YAPEAVUClass@@XZ
InitializeModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ