Static task
static1
Behavioral task
behavioral1
Sample
7233cfb720968569e23645b7fe4b96c0_NEIKI.dll
Resource
win7-20240215-en
General
-
Target
7233cfb720968569e23645b7fe4b96c0_NEIKI
-
Size
120KB
-
MD5
7233cfb720968569e23645b7fe4b96c0
-
SHA1
caf742dfac38ce7dd02b8a2d63c1d9203da69a7e
-
SHA256
7f48dd03257769d08ad1d113f8ff24d2d9aebf93c57dbf2b03f0fd26356bde76
-
SHA512
d08686028d92fc76f8588727da402f1e5870dc19b874f65e415b1bb0a31995b67a4f6b91fd2ea58fc725cd8c29f105907a013216a46608feba74e70e499d1836
-
SSDEEP
1536:ieRDW2dk2jkINcku28cdHuQjmZkQU3dCUpEn4bsBbjp0BnE:iYWD+kINZZutkQ+REn4bKbe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7233cfb720968569e23645b7fe4b96c0_NEIKI
Files
-
7233cfb720968569e23645b7fe4b96c0_NEIKI.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ