Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
42faa7fa81b935e4272ac23197d4eb88059cc18b1e0ceb540a8f8d3bda3d19d6_NeikiAnalytics.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
42faa7fa81b935e4272ac23197d4eb88059cc18b1e0ceb540a8f8d3bda3d19d6_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
Target
42faa7fa81b935e4272ac23197d4eb88059cc18b1e0ceb540a8f8d3bda3d19d6_NeikiAnalytics.exe
Size
6.0MB
MD5
af201cca17cdd6c4bda856cade0cc630
SHA1
8682e2792dfecf08ff87bb44e38c9f1cfcc53e8e
SHA256
42faa7fa81b935e4272ac23197d4eb88059cc18b1e0ceb540a8f8d3bda3d19d6
SHA512
0b96f328cc26ab5e1a7c923f0582e45d3ef3734c703962431c2feeaf79d2e7d003d169b06e06f1ae0b131b8a52a8928181229ddb656f4f6eaf7faeec89cab06e
SSDEEP
98304:qtuF3q3W7ZP7SXuxgQgBNjocfYMwdqgKOGGun4BeRSIDAmcMDSp:jF3kW7ZjSX4gQgzjVfjwdqgKLJoQ4
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\Basis\Projects\CyberTriage\CyberTriageTool\Release_VistaNoLibs\CyberTriageCollector_Vista.pdb
closesocket
ioctlsocket
shutdown
sendto
htons
WSAStringToAddressW
getnameinfo
WSAAddressToStringA
gethostbyname
setsockopt
freeaddrinfo
send
recv
inet_ntoa
getsockname
WSAGetLastError
connect
socket
getaddrinfo
WSAStartup
WSACleanup
inet_pton
GetUserProfileDirectoryW
ExpandEnvironmentStringsForUserW
InternetOpenUrlW
InternetOpenW
HttpEndRequestA
InternetOpenA
InternetCloseHandle
InternetSetOptionA
InternetConnectA
HttpQueryInfoA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetWriteFile
HttpSendRequestExA
InternetReadFile
LsaGetLogonSessionData
LsaEnumerateLogonSessions
LsaFreeReturnBuffer
DnsQuery_W
DnsFree
GetIpNetTable
GetAdaptersAddresses
GetIpForwardTable
GetTcpTable
GetUdpTable
PathFileExistsW
WTHelperProvDataFromStateData
WinVerifyTrust
CryptCATAdminReleaseCatalogContext
CryptCATCatalogInfoFromContext
CryptCATAdminEnumCatalogFromHash
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminAcquireContext
CryptCATAdminReleaseContext
WTHelperGetProvCertFromChain
CryptCATGetMemberInfo
CryptCATClose
CryptCATOpen
WTHelperGetProvSignerFromChain
GetModuleFileNameExW
GetStartupInfoW
RtlUnwind
InterlockedPushEntrySList
SetLastError
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
CreateEventW
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
CloseHandle
GetCurrentProcess
ExpandEnvironmentStringsA
GetCommandLineW
CreateDirectoryW
GetLastError
GetVersionExW
GetModuleFileNameW
GetTempPathW
RemoveDirectoryW
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetModuleHandleW
LocalFree
LocalAlloc
FormatMessageW
GetComputerNameExW
ReadFile
CreateFileW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
FreeLibrary
LoadLibraryW
GlobalAlloc
GlobalFree
LoadLibraryExW
CreateToolhelp32Snapshot
ExitProcess
OpenProcess
GetProcessTimes
Process32NextW
Sleep
FormatMessageA
GetLogicalDrives
GetDriveTypeW
GetVolumeInformationW
GetCurrentThreadId
GetCurrentProcessId
SetConsoleCtrlHandler
SetUnhandledExceptionFilter
FindClose
FindFirstFileW
FindNextFileW
QueryPerformanceCounter
QueryPerformanceFrequency
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetFullPathNameW
SetFilePointer
GetFileSize
DeviceIoControl
GetFileSizeEx
UnmapViewOfFile
DeleteFileW
GetSystemInfo
GetModuleHandleA
GetSystemTimeAsFileTime
GetModuleHandleExW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
FreeLibraryAndExitThread
SetFilePointerEx
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadConsoleW
SetStdHandle
GetStdHandle
GetCommandLineA
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
HeapSize
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableW
GetCPInfo
CompareStringEx
LCMapStringEx
DecodePointer
GetLocaleInfoW
Process32FirstW
EncodePointer
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
GetExitCodeThread
WaitForSingleObjectEx
GetLocaleInfoEx
TryEnterCriticalSection
InitializeCriticalSectionEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
SetEndOfFile
GetTimeZoneInformation
GetCurrentDirectoryW
FlushFileBuffers
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetStringTypeW
RaiseException
GetUserObjectSecurity
wsprintfW
EnumServicesStatusExW
GetTokenInformation
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
IsValidSid
GetSecurityDescriptorOwner
AdjustTokenPrivileges
LookupPrivilegeValueW
CloseServiceHandle
OpenProcessToken
OpenSCManagerW
LsaNtStatusToWinError
RegQueryValueExW
ConvertSidToStringSidW
ReadEventLogW
RegCloseKey
RegOpenKeyExW
CloseEventLog
OpenEventLogW
LookupAccountSidW
ConvertStringSidToSidA
ord17
CommandLineToArgvW
SHGetPathFromIDListW
SHGetFolderPathW
CoTaskMemFree
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoTaskMemAlloc
VariantClear
SysFreeString
SysAllocString
CertGetNameStringW
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
BCryptGenRandom
BCryptDestroyHash
BCryptFinishHash
BCryptHashData
BCryptCreateHash
BCryptDestroyKey
BCryptImportKey
BCryptExportKey
BCryptDecrypt
BCryptEncrypt
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptSetProperty
WinHttpSendRequest
WinHttpOpen
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpCloseHandle
WinHttpSetOption
WinHttpWriteData
WinHttpReadData
WinHttpConnect
WinHttpQueryHeaders
WinHttpAddRequestHeaders
WinHttpReceiveResponse
_cJSON_AddArrayToObject@8
_cJSON_AddBoolToObject@12
_cJSON_AddFalseToObject@8
_cJSON_AddItemReferenceToArray@8
_cJSON_AddItemReferenceToObject@12
_cJSON_AddItemToArray@8
_cJSON_AddItemToObject@12
_cJSON_AddItemToObjectCS@12
_cJSON_AddNullToObject@8
_cJSON_AddNumberToObject@16
_cJSON_AddObjectToObject@8
_cJSON_AddRawToObject@12
_cJSON_AddStringToObject@12
_cJSON_AddTrueToObject@8
_cJSON_Compare@12
_cJSON_CreateArray@0
_cJSON_CreateArrayReference@4
_cJSON_CreateBool@4
_cJSON_CreateDoubleArray@8
_cJSON_CreateFalse@0
_cJSON_CreateFloatArray@8
_cJSON_CreateIntArray@8
_cJSON_CreateNull@0
_cJSON_CreateNumber@8
_cJSON_CreateObject@0
_cJSON_CreateObjectReference@4
_cJSON_CreateRaw@4
_cJSON_CreateString@4
_cJSON_CreateStringArray@8
_cJSON_CreateStringReference@4
_cJSON_CreateTrue@0
_cJSON_Delete@4
_cJSON_DeleteItemFromArray@8
_cJSON_DeleteItemFromObject@8
_cJSON_DeleteItemFromObjectCaseSensitive@8
_cJSON_DetachItemFromArray@8
_cJSON_DetachItemFromObject@8
_cJSON_DetachItemFromObjectCaseSensitive@8
_cJSON_DetachItemViaPointer@8
_cJSON_Duplicate@8
_cJSON_GetArrayItem@8
_cJSON_GetArraySize@4
_cJSON_GetErrorPtr@0
_cJSON_GetObjectItem@8
_cJSON_GetObjectItemCaseSensitive@8
_cJSON_GetStringValue@4
_cJSON_HasObjectItem@8
_cJSON_InitHooks@4
_cJSON_InsertItemInArray@12
_cJSON_IsArray@4
_cJSON_IsBool@4
_cJSON_IsFalse@4
_cJSON_IsInvalid@4
_cJSON_IsNull@4
_cJSON_IsNumber@4
_cJSON_IsObject@4
_cJSON_IsRaw@4
_cJSON_IsString@4
_cJSON_IsTrue@4
_cJSON_Minify@4
_cJSON_Parse@4
_cJSON_ParseWithOpts@12
_cJSON_Print@4
_cJSON_PrintBuffered@12
_cJSON_PrintPreallocated@16
_cJSON_PrintUnformatted@4
_cJSON_ReplaceItemInArray@12
_cJSON_ReplaceItemInObject@12
_cJSON_ReplaceItemInObjectCaseSensitive@12
_cJSON_ReplaceItemViaPointer@12
_cJSON_SetNumberHelper@12
_cJSON_Version@0
_cJSON_free@4
_cJSON_malloc@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ