Extended Key Usages
ExtKeyUsageTimeStamping
Static task
static1
Behavioral task
behavioral1
Sample
48bb4819b7ca24b242b624dec96be84e9dc818f2a697d5931876f06c02599a09_NeikiAnalytics.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
48bb4819b7ca24b242b624dec96be84e9dc818f2a697d5931876f06c02599a09_NeikiAnalytics.dll
Resource
win10v2004-20240611-en
Target
48bb4819b7ca24b242b624dec96be84e9dc818f2a697d5931876f06c02599a09_NeikiAnalytics.exe
Size
1.5MB
MD5
39a41741767916549bad771c5be6ba10
SHA1
7af5b44f37531d604b92cde05dc020c92a426033
SHA256
48bb4819b7ca24b242b624dec96be84e9dc818f2a697d5931876f06c02599a09
SHA512
2985e4875b13febb39843addd0af04e211f4a778d2acc2613cf87e6ca84d84735a7c8bb3c62fdc068ba3635372856fc6ff5d2f0f7c76936cca1423e645995494
SSDEEP
12288:I2fzAQn9vYoppdqCbFdZ5VIBZu4LAe7qtE:tfzAQ95pdqCbbXIZuAAeuO
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
P:\Target\x86\ship\outlook\x-none\scnpst32.pdb
ReadFile
SetEndOfFile
SetFilePointer
WriteFile
CloseHandle
DuplicateHandle
GetOverlappedResult
ResetEvent
CreateEventA
QueueUserAPC
GetCurrentThread
FileTimeToLocalFileTime
MultiByteToWideChar
FreeLibrary
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryExA
IsBadReadPtr
CompareFileTime
GetSystemTime
SystemTimeToFileTime
GetACP
lstrlenA
GetTempFileNameW
GetTempPathW
CopyFileW
FormatMessageA
FormatMessageW
SetErrorMode
GetProcessHeap
VirtualQuery
GetVersionExA
DisableThreadLibraryCalls
lstrcmpiA
RaiseFailFastException
GetFileSizeEx
GetFileInformationByHandle
FlushFileBuffers
DeleteFileW
CreateFileW
GetPrivateProfileIntA
GetLastError
CreateDirectoryW
TerminateProcess
GetCurrentProcess
lstrlenW
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
Sleep
SleepEx
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
DebugBreak
GetSystemInfo
RaiseException
GetTempPathA
FileTimeToSystemTime
GetModuleHandleExW
LoadLibraryExW
LocalFree
HeapSetInformation
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
VirtualProtect
WerRegisterMemoryBlock
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
SetEvent
WaitForSingleObjectEx
CreateEventW
InitializeSListHead
IsDebuggerPresent
TlsGetValue
GetTickCount64
CreateDirectoryA
RegGetValueW
RegQueryValueExA
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
RegSetValueExW
RegCreateKeyExW
RegCloseKey
EventWrite
RegOpenKeyExA
CoCreateGuid
FIsFeatureEnabled@4
CbPhysicalMemory@0
DDLUninitInstance@0
EtwTraceErrorTag@8
EDPIsSessionLocked@0
CreateVirtualStream@4
ord259
DDLInitInstance@4
__std_type_info_destroy_list
__std_exception_destroy
memmove
memset
_CxxThrowException
__CxxFrameHandler3
memcpy
__std_terminate
memcmp
strchr
wcsrchr
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
_except_handler4_common
__vcrt_InitializeCriticalSectionEx
__std_exception_copy
_Xtime_get_ticks
_Thrd_sleep
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
_execute_onexit_table
_register_onexit_function
_cexit
_initialize_narrow_environment
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
_crt_atexit
_initterm
_initterm_e
_initialize_onexit_table
free
malloc
_callnewh
_libm_sse2_log_precise
_except1
__stdio_common_vsprintf_s
__stdio_common_vsprintf
__stdio_common_vswprintf
__stdio_common_vfprintf_s
fclose
fopen_s
qsort
wcsncat_s
wcsncpy_s
towlower
_stricmp
__initialize_lconv_for_unsigned_char
DLLEntryPoint
RCVR_CountBlocks32@16
RCVR_Deinitialize32@0
RCVR_Initialize32@8
RCVR_Repair32@8
RCVR_Scan32@32
RCVR_SetProgressCallbacks32@8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ