CPlApplet
Static task
static1
Behavioral task
behavioral1
Sample
c24b4243141bafc733a8f4258b7d91d0_NEIKI.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c24b4243141bafc733a8f4258b7d91d0_NEIKI.dll
Resource
win10v2004-20240226-en
General
-
Target
c24b4243141bafc733a8f4258b7d91d0_NEIKI
-
Size
636KB
-
MD5
c24b4243141bafc733a8f4258b7d91d0
-
SHA1
aea2024e2391d082084f3b5654cbac63c9402442
-
SHA256
56cde77848f8da2619c3d4406b583fc650419081bc927a1be9cc429cfe757884
-
SHA512
fc2445baa1f31c93dc33a9b1b8da126379ea0dd5995d8b0b3390fe74e1073a9129b1f682c9ddb1bb941b9842999fc24b940c85d10fc300baaa4f5ae020c03c9a
-
SSDEEP
6144:tDGNfO3eS44l1ENoHs3ZQaO+8rnJfIa95IQ6z:SS2oM2+8zC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c24b4243141bafc733a8f4258b7d91d0_NEIKI
Files
-
c24b4243141bafc733a8f4258b7d91d0_NEIKI.dll windows:4 windows x86 arch:x86
d56f6fc428c0db1db9390b5b4a3b540e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
wsock32
WSACleanup
WSAStartup
inet_addr
ntohl
ioctlsocket
kernel32
CreateFileA
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
RtlUnwind
GetCommandLineA
GetProcessHeap
RaiseException
ExitProcess
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
WritePrivateProfileStringA
GetThreadLocale
GetOEMCP
GetCPInfo
GlobalFlags
InterlockedIncrement
FindResourceExA
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
GetModuleFileNameA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
lstrcmpW
GetVersionExA
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
MulDiv
GlobalFree
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualProtect
LocalAlloc
LocalFree
ExpandEnvironmentStringsA
GetCurrentThread
GetCurrentProcess
SetFileAttributesA
DeleteFileA
lstrcatA
FindFirstFileA
FindClose
lstrcpynA
GetSystemDirectoryA
CreateProcessA
CloseHandle
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
CompareStringA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
TerminateProcess
user32
LoadCursorA
GetSysColorBrush
UnregisterClassA
SetCursor
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
PeekMessageA
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
CopyRect
PtInRect
DefWindowProcA
CallWindowProcA
SetWindowLongA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetCapture
GetActiveWindow
SetActiveWindow
MapDialogRect
SetWindowPos
ShowWindow
GetAsyncKeyState
GetFocus
SetFocus
GetWindowRect
GetWindowLongA
PostMessageA
GetParent
IsWindowEnabled
LoadStringA
EnumChildWindows
WinHelpA
LoadIconA
GetNextDlgGroupItem
GetDlgCtrlID
GetDlgItem
GetSysColor
ReleaseDC
GetDC
GetClientRect
LoadBitmapA
SendMessageA
EnableWindow
DestroyMenu
UnhookWindowsHookEx
MapWindowPoints
gdi32
DeleteDC
GetStockObject
ScaleWindowExtEx
EnumFontFamiliesExA
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
shell32
ShellExecuteA
ole32
OleUninitialize
OleInitialize
oleaut32
VariantClear
VariantChangeType
VariantInit
shlwapi
PathFindFileNameA
PathFindExtensionA
oleacc
CreateStdAccessibleObject
LresultFromObject
Exports
Exports
Sections
.text Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 404KB - Virtual size: 403KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ