9daa6961e7cf33a3a078ba31e79bb410_NEIKI

Sharing

Copy URL Twitter E-mail

General

Target

9daa6961e7cf33a3a078ba31e79bb410_NEIKI
Size

1.5MB
MD5

9daa6961e7cf33a3a078ba31e79bb410
SHA1

dbbf8a5dbe4741f0010faa310f930faf26d9fd3c
SHA256

bd174e91f96ea0ee53feb916176c57ea4aefbf3dde9652eaef8fec7d278ac4c6
SHA512

6d180cde6bddff964c7df061f845ba5db593570c6f2c6348cbf7d988e2aacd456d52a603e81714dd4167f2b5a25d421eab2329a43ee1828dc6fb0b17aca193c7
SSDEEP

24576:1ZvcDJYYlQ4U+v3n9C54bvhRvvvvTSTeV5qNZvZ5kHRdzVAYX4ZgfHSNwB/E514N:1Gb3IodqlWzOM4Qy6B/EhO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9daa6961e7cf33a3a078ba31e79bb410_NEIKI

Files

9daa6961e7cf33a3a078ba31e79bb410_NEIKI
.exe windows:4 windows x86 arch:x86

450d5e2de01cc698d223eff112c7b566

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
GetStdHandle
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetEnvironmentStringsW
SetHandleCount
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
TerminateProcess
IsBadReadPtr
HeapFree
HeapAlloc
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
IsBadCodePtr
SetErrorMode
GetModuleFileNameA
GlobalAlloc
lstrcmpA
GetCurrentThread
InterlockedDecrement
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
GetFileTime
GetProfileStringA
GetFileSize
GetFileAttributesA
GetVolumeInformationA
GetFullPathNameA
FindFirstFileA
FindClose
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
CreateFileA
WriteFile
ReadFile
GetThreadLocale
GetCurrentProcess
DuplicateHandle
WritePrivateProfileStringA
GetCPInfo
GetOEMCP
LocalReAlloc
GetProcessVersion
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
GetLastError
LocalAlloc
SizeofResource
LocalFree
GlobalFlags
FormatMessageA
WideCharToMultiByte
lstrcpynA
MultiByteToWideChar
InterlockedIncrement
lstrlenA
CloseHandle
LoadResource

user32

RegisterClipboardFormatA
PostThreadMessageA
CharNextA
GetDesktopWindow
PtInRect
SetRectEmpty
DestroyMenu
LoadStringA
InflateRect
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
PostQuitMessage
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
GetFocus
ScreenToClient
EqualRect
DeferWindowPos
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
CopyAcceleratorTableA
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgGroupItem
ReleaseCapture
InvalidateRect
CharUpperA
MessageBeep
AdjustWindowRectEx
SetFocus
GetMenu
GetCapture
WindowFromPoint
OffsetRect
DrawFocusRect
GetWindowLongA
DrawEdge
GetParent
ClientToScreen
GetSysColor
GetDC
SetCursor
DrawTextA
GetWindowDC
ReleaseDC
KillTimer
CopyRect
GetSysColorBrush
SetRect
SetTimer
LoadCursorA
UpdateWindow
IsWindow
LoadMenuA
GetSubMenu
GetCursorPos
RedrawWindow
PeekMessageA
DispatchMessageA
IsIconic
GetSystemMetrics
DrawIcon
GetSystemMenu
AppendMenuA
SendMessageA
LoadIconA
EnableWindow
GetClassNameA
PostMessageA
GetWindowRect
SetWindowRgn
GetClientRect
LoadBitmapA
ValidateRect
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode

gdi32

CreateCompatibleDC
GetPixel
CombineRgn
ExcludeClipRect
IntersectClipRect
CreateRectRgn
BitBlt
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
GetMapMode
PatBlt
DPtoLP
StretchDIBits
GetTextColor
GetBkColor
LPtoDP
CreateDIBitmap
GetTextExtentPointA
ScaleWindowExtEx
SetWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
SelectClipRgn
SelectObject
DeleteDC
SetPixel
GetDIBits
DeleteObject
GetStockObject
CreateCompatibleBitmap
GetObjectA
CreateFontIndirectA
StretchBlt
ScaleViewportExtEx

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

comctl32

ImageList_AddMasked
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Create

oledlg

ord8

ole32

CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
SysAllocString
VariantClear
SysAllocStringLen
SysFreeString
SysAllocStringByteLen
VariantTimeToSystemTime
VariantCopy
VariantChangeType

wsock32

recvfrom
select
closesocket
inet_addr
WSAStartup
WSACleanup
ntohl
ioctlsocket
sendto
htons
socket
setsockopt
__WSAFDIsSet

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

450d5e2de01cc698d223eff112c7b566

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

Sections

.text Size: 188KB - Virtual size: 187KB

.rdata Size: 48KB - Virtual size: 45KB

.data Size: 12KB - Virtual size: 25KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.text
Size: 188KB - Virtual size: 187KB

.rdata
Size: 48KB - Virtual size: 45KB

.data
Size: 12KB - Virtual size: 25KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB