74a7246c6138d548c6254e37aa63d190_NEIKI

Sharing

Copy URL Twitter E-mail

General

Target

74a7246c6138d548c6254e37aa63d190_NEIKI
Size

164KB
MD5

74a7246c6138d548c6254e37aa63d190
SHA1

2df3533f885b3e11ed91498d59f6d48a56296528
SHA256

9a2b1ae32023f2f51e1936913f101b05f9f69beeb9e36eecb2448cb05fa9f136
SHA512

85991a60cc987b9bd6fcc5d6ef0f0ab73aa1577eb66e8ecf602d5d84b73ef469d6d4ecc1a0c13ebbe73584cab6e65433b27c907073ad8851fed6197c8c8fefb0
SSDEEP

3072:PAHpmYN4zjw3UL3U23UD3Ur3UD3UF3UHPrCA+1GJnaVrcqE+I+V+Ns1ZRfI+omEl:m/yjsPVpaVrcqE+IxCS+od

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74a7246c6138d548c6254e37aa63d190_NEIKI

Files

74a7246c6138d548c6254e37aa63d190_NEIKI
.dll regsvr32 windows:4 windows x86 arch:x86

565c17e68cbea13fba0ea0f1887056b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
wcsstr
wcsncpy
wcslen
wcscpy
wcschr
strncpy
iswcntrl
swprintf
wcstol
wcscmp
swscanf
_except_handler3

pal

PalAtomicIncrement
PalAtomicDecrement
PalGetModuleFileName
PalUnregisterServer
PalFreeResource
PalLoadResource
PalCreateInstance
PalRegisterServer
PalQuerySysInfo

Exports

Exports

AddBlock8x8
ClearBlock8x8
CopyBlock
CopyBlock8x8
CopyBlockHor
CopyBlockHorRound
CopyBlockHorVer
CopyBlockHorVerRound
CopyBlockVer
CopyBlockVerRound
CopyBoundaryBlock
CopyColumn8ToRow8
CopyMBlock
CopyMBlockHor
CopyMBlockHorRound
CopyMBlockHorVer
CopyMBlockHorVerRound
CopyMBlockVer
CopyMBlockVerRound
CopyMemBlock
CopyMemBlockHor
CopyMemBlockHorVer
CopyMemBlockVer
CopyRow8ToRow8
CopyToBlock8x8
CreateBitStream
CreateWritableBitStream
DeblockHorizontal
DeblockVertical
Dering
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DownSample
FillBoundaryBlock
Filter_3x3
Filter_5x5
ForwardDCT
H263_InverseQuantization
H263_InverseQuantization2
H263_MiniInverseQuantization
H263_Quantization
H263_VlcDct
H263_VldDct
InverseACPredictionHor
InverseACPredictionVer
InverseDCT
InverseDCT2
MPEG_InverseQuantization
MPEG_MiniInverseQuantization
MPEG_Quantization
MakeEdge
MemCopy128
MemSet128
MiniInverseDCT
MiniInverseDCT2
MotionError_MAE
QueryFormatSpec
QuerySupportedPixelFormats
ReversibleVlcInterDct
ReversibleVlcIntraDct
ReversibleVldInterDct
ReversibleVldIntraDct
SubtractBlock
SubtractBlockHor
SubtractBlockHorRound
SubtractBlockHorVer
SubtractBlockHorVerRound
SubtractBlockVer
SubtractBlockVerRound
VlcInterDct
VlcIntraDct
VldInterDct
VldIntraDct

Sections

.text
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

565c17e68cbea13fba0ea0f1887056b8

Headers

File Characteristics

Imports

msvcrt

pal

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 113KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 1.3MB

.data1 Size: 8KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 952B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 116KB - Virtual size: 113KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 1.3MB

.data1
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 952B

.reloc
Size: 8KB - Virtual size: 7KB