Static task
static1
Behavioral task
behavioral1
Sample
15ddedfd9c3b33185ec4852ee58731f0_NEIKI.dll
Resource
win7-20231129-en
General
-
Target
15ddedfd9c3b33185ec4852ee58731f0_NEIKI
-
Size
120KB
-
MD5
15ddedfd9c3b33185ec4852ee58731f0
-
SHA1
75252949fd83cda97653d7a15e23f221bc855239
-
SHA256
e50f0922cd00fa14d0a53eccf47ac8ebec4e6291368d3dd341bab7c77cf0c9a1
-
SHA512
4987a0b1564e6aa7bb1a2f8ae8261590a20712158166ebda6813c6f03882da38ff790eb2663450923a6e72a4a4b2afe6727c5e5365a9a033eec4200b09f97d2d
-
SSDEEP
1536:968KW70CmiHhV2pgQtqWAUU76YXvrcPC0zdLwSRh7rNjbT1H3wZt34j4c:lKWuiBY5tqxUU76Y/rcaQLwSJjb+z4L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 15ddedfd9c3b33185ec4852ee58731f0_NEIKI
Files
-
15ddedfd9c3b33185ec4852ee58731f0_NEIKI.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ