CheckIntegrity
CloseAllMessenger
DllRegisterServer
Events
ExecFunc
Invoke
Property
Rundll32
Static task
static1
Behavioral task
behavioral1
Sample
6a9671402a0b84c0843824a5b0865b70_NEIKI.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6a9671402a0b84c0843824a5b0865b70_NEIKI.dll
Resource
win10v2004-20240426-en
Target
6a9671402a0b84c0843824a5b0865b70_NEIKI
Size
264KB
MD5
6a9671402a0b84c0843824a5b0865b70
SHA1
558e00112259a92178947ce80084ad339ff3b157
SHA256
97e3dc2bd3b27cdbd7ae533f2c5043d22281df8017db2714bc046273d50f8bfb
SHA512
a501337360b3b60aafd283e7d5322cf3040ea72ef4cbf8e79acd23390728658dd26e42637b6ecc27583ac29c84d1a275924841ea668506b037387d926f1bd119
SSDEEP
3072:W8vXtvrzGXtwYG1NHisc7Tka4OXZHswWgSFWu1XJWRzQDTxdQN1dO47SC9m4NmFG:fXtfGXaYG1c9SOVf/TJzQXxcRIolo
Checks for missing Authenticode signature.
resource |
---|
6a9671402a0b84c0843824a5b0865b70_NEIKI |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
ShellExecuteExA
SHGetPathFromIDListA
SHGetSpecialFolderPathA
SHGetMalloc
SHGetSpecialFolderLocation
CreateDirectoryA
WritePrivateProfileSectionA
GetPrivateProfileSectionA
MoveFileExA
GetDriveTypeA
DeleteFileA
SetFileAttributesA
FreeLibrary
GetProcAddress
CloseHandle
GetCurrentProcess
TerminateProcess
OpenProcess
CreateProcessA
WideCharToMultiByte
lstrlenW
HeapAlloc
GetProcessHeap
HeapFree
LoadLibraryA
WritePrivateProfileStringA
DeviceIoControl
CreateFileA
IsBadReadPtr
GetTickCount
GetLastError
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetTempFileNameA
lstrlenA
Sleep
CreateThread
GetWindowsDirectoryA
LockResource
SizeofResource
LoadResource
FindResourceA
WriteFile
GetPrivateProfileStringA
GetPrivateProfileIntA
ReadFile
IsBadWritePtr
FindNextFileA
MultiByteToWideChar
lstrcmpiA
MoveFileA
GetACP
CreateFileMappingA
GetFileSize
FlushFileBuffers
InterlockedDecrement
LocalFree
LocalAlloc
SearchPathA
GetVersionExA
GetFileAttributesA
FindClose
FindFirstFileA
GetShortPathNameA
GetLongPathNameA
GetCurrentDirectoryA
GetModuleFileNameA
VirtualQuery
ExpandEnvironmentStringsA
GetTempPathA
GetSystemDirectoryA
WaitForSingleObject
EnumChildWindows
SendMessageA
EnumWindows
DialogBoxParamA
EndDialog
SendDlgItemMessageA
GetDlgItem
PostMessageA
LoadStringA
GetTopWindow
GetWindowTextA
GetDesktopWindow
MessageBoxA
wsprintfA
SendMessageTimeoutA
ChangeServiceConfigA
RegSetValueExA
RegEnumKeyExA
GetTokenInformation
LookupAccountSidA
RegEnumKeyA
RegCreateKeyExA
RegQueryValueExA
QueryServiceStatus
OpenSCManagerA
OpenServiceA
ControlService
StartServiceA
CloseServiceHandle
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
RegDeleteValueA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
CoUninitialize
OleRun
CoInitialize
CoCreateInstance
VariantClear
SysFreeString
VariantInit
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
SHDeleteValueA
SHDeleteKeyA
SHEnumValueA
SHEnumKeyExA
SHSetValueA
SHGetValueA
ftell
fseek
_vsnprintf
_wcsicmp
time
isprint
strftime
localtime
_mbsstr
fwrite
_except_handler3
_local_unwind2
??1type_info@@UAE@XZ
__dllonexit
_initterm
_adjust_fdiv
_onexit
?terminate@@YAXXZ
_strnicmp
_strlwr
_CxxThrowException
fprintf
_lseek
_tell
_open
_read
_close
_stricmp
strcpy
realloc
_mbsicmp
_mbslwr
_strdup
fgets
atoi
memcmp
vsprintf
fputs
strcmp
memmove
strncpy
_snprintf
memset
strrchr
strchr
strlen
strstr
strncat
strcat
_mbsnbcpy
_mbschr
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_mbsrchr
free
fclose
fread
malloc
_filelength
fopen
memcpy
_mbsnbicmp
_mbscmp
WSCDeinstallProvider
WSCEnumProtocols
WSCGetProviderPath
GetAdaptersInfo
ord17
CheckIntegrity
CloseAllMessenger
DllRegisterServer
Events
ExecFunc
Invoke
Property
Rundll32
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ