Static task
static1
Behavioral task
behavioral1
Sample
2cbc0e90cfa63f353d82ba132be8a690_NEIKI.dll
Resource
win7-20240419-en
General
-
Target
2cbc0e90cfa63f353d82ba132be8a690_NEIKI
-
Size
120KB
-
MD5
2cbc0e90cfa63f353d82ba132be8a690
-
SHA1
dc9638bed3c87a5773027e2237f93f58397b7384
-
SHA256
1f2f35b3725f020852b9236838a6115fd28818b7b8d9a29a5b2e7fbefa6ed3bb
-
SHA512
ec5ade4d1f9fa902b504a5b7383ae186cc7f9f3aa938bd352f9de1d93c407676fa69f4c2983002f117a15f9eb52587b33d8be9b5ea6e167a47c67ff71c07201d
-
SSDEEP
1536:nknrbivxqhErU0Oea1iswWIHMhEzOa8MRqLslfJSRAgEiezpG37SC0Q7i+ew7pFq:nknrbMqKMitUEzOa8/LslJgEiJmi7i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2cbc0e90cfa63f353d82ba132be8a690_NEIKI
Files
-
2cbc0e90cfa63f353d82ba132be8a690_NEIKI.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ