Static task
static1
Behavioral task
behavioral1
Sample
42dd56793c8c17f612f226f05f2ab910_NEIKI.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
42dd56793c8c17f612f226f05f2ab910_NEIKI.dll
Resource
win10v2004-20240426-en
General
-
Target
42dd56793c8c17f612f226f05f2ab910_NEIKI
-
Size
2.8MB
-
MD5
42dd56793c8c17f612f226f05f2ab910
-
SHA1
3882bd7f004989dcd853faa9b06e75abb5229944
-
SHA256
2d0dd3e0bd04adc7657744f799a7ec8e7ee1f8370d9b6c0037fe1190b4751251
-
SHA512
271ce31bf5cb749e82055556da44791b01565a8f899ec7224eca44ef51868eaacaad0e635fffdbbfbba26f5ac49c7e8c2fa46404384485e8c79e06d97b2278d5
-
SSDEEP
49152:csQKZsq9tqGpJS8XqOAWRUYxZa3iqExYVwms+GGnDa3o9:csQm9tqGpMmqOX2eZLTmJDa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42dd56793c8c17f612f226f05f2ab910_NEIKI
Files
-
42dd56793c8c17f612f226f05f2ab910_NEIKI.dll windows:5 windows x86 arch:x86
5cbedb1736fbcc282a6d4873260e9221
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
powrprof
WriteGlobalPwrPolicy
kernel32
GetNumberOfConsoleInputEvents
GlobalSize
CloseHandle
RtlUnwind
ConnectNamedPipe
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetUserGeoID
WTSGetActiveConsoleSessionId
TerminateJobObject
GetStringTypeW
LoadLibraryExW
GetBinaryTypeW
GetModuleFileNameW
SetStdHandle
DeleteCriticalSection
TerminateProcess
user32
GetSysColorBrush
RegisterRawInputDevices
GetMessagePos
UnloadKeyboardLayout
BeginPaint
GetMessageA
GetSystemMenu
SetProcessWindowStation
advapi32
SetSecurityInfo
LookupPrivilegeValueW
ole32
HPALETTE_UserUnmarshal
gdi32
CreateCompatibleBitmap
OffsetViewportOrgEx
ExcludeClipRect
StrokeAndFillPath
OffsetClipRgn
DeleteObject
GetDeviceCaps
CloseEnhMetaFile
ws2_32
WSAGetLastError
Sections
.text Size: 156KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.code Size: 476KB - Virtual size: 477KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lq8zSJD Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.crt1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ