Static task
static1
Behavioral task
behavioral1
Sample
88b7bec9ebfe524f66649138d292fec0_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
88b7bec9ebfe524f66649138d292fec0_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
88b7bec9ebfe524f66649138d292fec0_NEIKI
-
Size
2.5MB
-
MD5
88b7bec9ebfe524f66649138d292fec0
-
SHA1
43ea4a2a654983998345dcc30cff2cbc91a56eda
-
SHA256
258731e0600ac83030c9744d836c83623550cbb60c102eb2c78fe67fa425e9ff
-
SHA512
23b66981cc65f6a29e3ecac3499638e23695897a5192306d6b1c2c1aa8caece3a88ba3992d44a49ed87483b579fcdc2e58bd5be2a5996a65d3e7cc7f5e0f8def
-
SSDEEP
49152:3NPrzr22GnwrAfsj2Aok5var08uKqJHNDKgyiYAEX6TNwQPkLZ59Op:9zz6Znw0fsj2pk5var0dJHNDpJS6TCqH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88b7bec9ebfe524f66649138d292fec0_NEIKI
Files
-
88b7bec9ebfe524f66649138d292fec0_NEIKI.exe windows:5 windows x86 arch:x86
4268557efce3fa2e437d5fc0c7252c1d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comdrvs
ComReadZylKeyCode
ComReadZylAuthorisationTab
ComReadZylTrans
ComGetKommIfInfo
ComReadZylRejectTab
ComWriteZylData
ComGetDllInfo
ComInitialise
ComReadZylData
ComWriteZylAuthorisationTab
ComWriteZylKeyCode
ComWriteZylRejectTab
ComReadComKey
ComReadKeyData
ComCpReadSingleZylData
ComCpReadObjectDir
ComCpReadKcDir
ComCpReadScDir
ComCpReadSingleKeyData
ComCpWriteFcEntry
ComCpWriteKeyData
ComOpenDevice
ComCpWriteZylData
ComWriteKeyData
ComCloseDevice
rdm45w32
ord17
ord85
ord34
ord33
ord38
ord129
ord53
ord92
ord69
ord13
ord2
ord135
ord127
ord3
ord119
ord50
ord72
ord126
ord19
ord141
ord99
ord42
ord44
ord8
ord86
ord122
ord91
ord121
ord70
ord71
ord31
ord1
ord5
ord40
ord124
ord125
ord52
ord139
ord102
ord21
ord41
ord6
ord43
ord133
ord77
ord82
ord9
ord39
ord35
ord134
ord11
mpr
WNetCancelConnectionA
WNetUseConnectionA
comctl32
InitCommonControlsEx
ImageList_Destroy
ImageList_Create
ImageList_Add
rpcrt4
UuidCreateNil
UuidIsNil
UuidFromStringA
RpcStringFreeA
UuidToStringA
UuidCreate
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
GetCommandLineA
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetLocalTime
CreateDirectoryA
GetSystemTimeAsFileTime
HeapSetInformation
lstrlenA
lstrcmpiA
lstrcpynA
GetTimeZoneInformation
lstrcmpA
GlobalAlloc
GlobalFree
CloseHandle
ClearCommError
PurgeComm
SetCommTimeouts
GetCommTimeouts
SetCommState
GetCommState
GetLastError
CreateFileA
WriteFile
ReadFile
GetTickCount
Sleep
CopyFileA
VirtualFree
FindClose
GetStartupInfoW
DeleteFileA
FindNextFileA
FindFirstFileA
GetTempPathA
GlobalReAlloc
GlobalLock
GlobalUnlock
lstrcatA
lstrcpyA
GetModuleFileNameA
SetLastError
SetFilePointer
GetVersionExA
FormatMessageA
GetFileSize
LockFile
UnlockFile
FlushFileBuffers
SetEndOfFile
GetFileTime
GetFileAttributesA
GetProcAddress
LoadLibraryA
SetFileAttributesA
SetFileTime
GetTempFileNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalGetAtomNameA
GetModuleHandleA
GetCurrentThreadId
CreateProcessA
GetUserDefaultLangID
ResetEvent
GetOverlappedResult
CreateEventA
FreeLibrary
GetLocaleInfoA
SystemTimeToFileTime
GetSystemTime
LocalReAlloc
LocalAlloc
LocalFree
WaitForSingleObject
GetDiskFreeSpaceA
GetCurrentDirectoryA
LockResource
LoadResource
FindResourceA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
CreateSemaphoreA
InterlockedIncrement
InterlockedDecrement
GetShortPathNameA
SetThreadPriority
CreateThread
SetEvent
GetProfileStringA
ExpandEnvironmentStringsA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
HeapAlloc
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetUserDefaultLCID
GetLocaleInfoW
EnumSystemLocalesA
IsValidLocale
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetConsoleCP
GetConsoleMode
RtlUnwind
HeapReAlloc
SetEnvironmentVariableA
LoadLibraryW
RaiseException
SetStdHandle
WriteConsoleW
HeapSize
CreateFileW
CompareStringW
VirtualAlloc
user32
SetRectEmpty
UnionRect
LoadBitmapA
ScrollWindow
GetCapture
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
GetWindowPlacement
GetDlgItem
DestroyCursor
LoadStringA
MapDialogRect
CreateDialogIndirectParamA
GetMessageTime
PtInRect
IntersectRect
InvertRect
GetScrollRange
GetScrollPos
SetScrollRange
SetScrollPos
GetClassNameA
GetCursorPos
ScreenToClient
wsprintfA
GetDlgItemTextA
EnumChildWindows
CheckRadioButton
GetDlgItemInt
IsWindowEnabled
GetSystemMetrics
PeekMessageA
IsDialogMessageA
TranslateMessage
CreatePopupMenu
IsDlgButtonChecked
DrawFocusRect
LoadCursorA
SubtractRect
DestroyMenu
GetDlgCtrlID
PostMessageA
DefWindowProcA
EndPaint
BeginPaint
SetRect
FillRect
UnregisterClassA
GetWindowLongA
MapWindowPoints
MoveWindow
GetSysColor
SetFocus
CheckDlgButton
InflateRect
OffsetRect
UpdateWindow
EnableWindow
GetClientRect
InvalidateRect
AppendMenuA
SetMenu
IsClipboardFormatAvailable
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
LoadIconA
ReleaseDC
GetDC
SendMessageA
IsWindow
DialogBoxParamA
GetParent
SendDlgItemMessageA
SetDlgItemTextA
SetWindowLongA
SetWindowTextA
EndDialog
PostQuitMessage
GetMenuItemInfoA
TrackPopupMenuEx
RemoveMenu
RegisterClassA
ChildWindowFromPoint
GetLastActivePopup
IsIconic
SetForegroundWindow
IsMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
EnableMenuItem
IsWindowVisible
CreateMenu
FindWindowA
ValidateRect
GetNextDlgTabItem
MessageBeep
RedrawWindow
GetUpdateRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
CreateWindowExA
LoadImageA
OemToCharA
SetWindowPos
CharToOemA
MessageBoxA
GetMessagePos
SetTimer
KillTimer
CreateDialogParamA
DestroyWindow
GetActiveWindow
WindowFromPoint
IsChild
CallWindowProcA
GetSysColorBrush
GetWindow
ShowWindow
GetWindowRect
SetScrollInfo
SetCursor
GetFocus
GetKeyState
GetCursor
SetCapture
SystemParametersInfoA
GetScrollInfo
ReleaseCapture
ScrollWindowEx
EqualRect
OpenClipboard
EmptyClipboard
SetClipboardData
DispatchMessageA
CloseClipboard
CharUpperA
gdi32
Rectangle
PatBlt
CreateRectRgnIndirect
LineTo
MoveToEx
SetBkMode
CreateDIBitmap
GetStockObject
CombineRgn
SelectClipRgn
FillRgn
LineDDA
CreateFontIndirectA
GetTextAlign
EndPage
GetDeviceCaps
CreateDCA
SetMapMode
TextOutA
EndDoc
StartDocA
SetAbortProc
AbortDoc
StartPage
CreatePen
CreatePatternBrush
SetTextColor
SetTextAlign
GetMapMode
StretchBlt
CreateSolidBrush
CreateCompatibleDC
CreateBitmap
CreateCompatibleBitmap
BitBlt
SetBkColor
DeleteDC
DeleteObject
GetObjectA
ExtTextOutA
SelectObject
GetTextMetricsA
GetTextExtentPoint32A
winspool.drv
OpenPrinterA
GetPrinterA
DocumentPropertiesA
ClosePrinter
DeviceCapabilitiesA
EnumPrintersA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
PrintDlgA
CommDlgExtendedError
GetFileTitleA
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
shell32
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 422KB - Virtual size: 421KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ