c4081e11fe76b6b1d905c8881aca2620_NEIKI

Sharing

Copy URL Twitter E-mail

General

Target

c4081e11fe76b6b1d905c8881aca2620_NEIKI
Size

402KB
MD5

c4081e11fe76b6b1d905c8881aca2620
SHA1

e774809a2341924acd638f2f25e6e5cc45a0a78d
SHA256

9f23438542eacadf1bdcb53522ae659dff23781ecdc46cce1c8b17d2925a04fe
SHA512

cd94cea1a122362d271e8f60ee5178b94e6ecae0802816cd5ab65d3d2a1e1cfea4458022c3c7f1f3ccd2c341ada00993d6c1996633f88601922c7989d0bb0d32
SSDEEP

6144:UTd0LSf9HK7R0ehvw8W/Ui6SzUEEEEEEzKwTBFEFTZrDdsbk3v8g5SCwZnuR:UTcSjb8W/UgS7EFTZDdsA/4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4081e11fe76b6b1d905c8881aca2620_NEIKI

Files

c4081e11fe76b6b1d905c8881aca2620_NEIKI
.dll windows:6 windows x64 arch:x64

ebafc7e009cf88232c4d849d302165fe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

vtkjpeg-9.0

vtkjpeg_jpeg_start_compress
vtkjpeg_jpeg_CreateDecompress
vtkjpeg_jpeg_std_error
vtkjpeg_jpeg_set_colorspace
vtkjpeg_jpeg_set_quality
vtkjpeg_jpeg_suppress_tables
vtkjpeg_jpeg_write_raw_data
vtkjpeg_jpeg_CreateCompress
vtkjpeg_jpeg_finish_compress
vtkjpeg_jpeg_write_scanlines
vtkjpeg_jpeg_set_defaults
vtkjpeg_jpeg_destroy
vtkjpeg_jpeg_abort
vtkjpeg_jpeg_has_multiple_scans
vtkjpeg_jpeg_resync_to_restart
vtkjpeg_jpeg_read_raw_data
vtkjpeg_jpeg_finish_decompress
vtkjpeg_jpeg_read_scanlines
vtkjpeg_jpeg_start_decompress
vtkjpeg_jpeg_read_header
vtkjpeg_jpeg_write_tables

vtkzlib-9.0

vtkzlib_deflate
vtkzlib_deflateEnd
vtkzlib_inflate
vtkzlib_inflateEnd
vtkzlib_deflateReset
vtkzlib_deflateParams
vtkzlib_inflateReset
vtkzlib_deflateInit_
vtkzlib_inflateInit_

kernel32

IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
MapViewOfFile
GetLastError
CloseHandle
WriteFile
UnmapViewOfFile
SetFilePointer
ReadFile
GetFileSize
CreateFileW
CreateFileA
CreateFileMappingA
WideCharToMultiByte

vcruntime140

memcpy
memset
memmove
longjmp
strchr
memcmp
__C_specific_handler
__std_type_info_destroy_list
__intrinsic_setjmp

api-ms-win-crt-math-l1-1-0

exp
atan2
pow
log
floor
sqrt

api-ms-win-crt-string-l1-1-0

strncmp
isprint
strcmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func
fputc
fputs
__stdio_common_vsprintf

api-ms-win-crt-utility-l1-1-0

rand
qsort
bsearch

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-heap-l1-1-0

realloc
malloc
free
calloc

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_cexit
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

Exports

Exports

vtktiff_LogL10fromY
vtktiff_LogL10toY
vtktiff_LogL16fromY
vtktiff_LogL16toY
vtktiff_LogLuv24fromXYZ
vtktiff_LogLuv24toXYZ
vtktiff_LogLuv32fromXYZ
vtktiff_LogLuv32toXYZ
vtktiff_TIFFAccessTagMethods
vtktiff_TIFFCIELabToRGBInit
vtktiff_TIFFCIELabToXYZ
vtktiff_TIFFCheckTile
vtktiff_TIFFCheckpointDirectory
vtktiff_TIFFCleanup
vtktiff_TIFFClientOpen
vtktiff_TIFFClientdata
vtktiff_TIFFClose
vtktiff_TIFFComputeStrip
vtktiff_TIFFComputeTile
vtktiff_TIFFCreateCustomDirectory
vtktiff_TIFFCreateDirectory
vtktiff_TIFFCreateEXIFDirectory
vtktiff_TIFFCurrentDirOffset
vtktiff_TIFFCurrentDirectory
vtktiff_TIFFCurrentRow
vtktiff_TIFFCurrentStrip
vtktiff_TIFFCurrentTile
vtktiff_TIFFDataWidth
vtktiff_TIFFDefaultDirectory
vtktiff_TIFFDefaultStripSize
vtktiff_TIFFDefaultTileSize
vtktiff_TIFFDeferStrileArrayWriting
vtktiff_TIFFError
vtktiff_TIFFErrorExt
vtktiff_TIFFFdOpen
vtktiff_TIFFFieldDataType
vtktiff_TIFFFieldName
vtktiff_TIFFFieldPassCount
vtktiff_TIFFFieldReadCount
vtktiff_TIFFFieldTag
vtktiff_TIFFFieldWithName
vtktiff_TIFFFieldWithTag
vtktiff_TIFFFieldWriteCount
vtktiff_TIFFFileName
vtktiff_TIFFFileno
vtktiff_TIFFFindCODEC
vtktiff_TIFFFindField
vtktiff_TIFFFlush
vtktiff_TIFFFlushData
vtktiff_TIFFFlushData1
vtktiff_TIFFForceStrileArrayWriting
vtktiff_TIFFFreeDirectory
vtktiff_TIFFGetBitRevTable
vtktiff_TIFFGetClientInfo
vtktiff_TIFFGetCloseProc
vtktiff_TIFFGetConfiguredCODECs
vtktiff_TIFFGetField
vtktiff_TIFFGetFieldDefaulted
vtktiff_TIFFGetMapFileProc
vtktiff_TIFFGetMode
vtktiff_TIFFGetReadProc
vtktiff_TIFFGetSeekProc
vtktiff_TIFFGetSizeProc
vtktiff_TIFFGetStrileByteCount
vtktiff_TIFFGetStrileByteCountWithErr
vtktiff_TIFFGetStrileOffset
vtktiff_TIFFGetStrileOffsetWithErr
vtktiff_TIFFGetTagListCount
vtktiff_TIFFGetTagListEntry
vtktiff_TIFFGetUnmapFileProc
vtktiff_TIFFGetVersion
vtktiff_TIFFGetWriteProc
vtktiff_TIFFInitCCITTFax3
vtktiff_TIFFInitCCITTFax4
vtktiff_TIFFInitCCITTRLE
vtktiff_TIFFInitCCITTRLEW
vtktiff_TIFFInitDumpMode
vtktiff_TIFFInitJPEG
vtktiff_TIFFInitLZW
vtktiff_TIFFInitNeXT
vtktiff_TIFFInitPackBits
vtktiff_TIFFInitPixarLog
vtktiff_TIFFInitSGILog
vtktiff_TIFFInitThunderScan
vtktiff_TIFFInitZIP
vtktiff_TIFFIsBigEndian
vtktiff_TIFFIsByteSwapped
vtktiff_TIFFIsCODECConfigured
vtktiff_TIFFIsMSB2LSB
vtktiff_TIFFIsTiled
vtktiff_TIFFIsUpSampled
vtktiff_TIFFJPEGIsFullStripRequired
vtktiff_TIFFLastDirectory
vtktiff_TIFFMergeFieldInfo
vtktiff_TIFFNumberOfDirectories
vtktiff_TIFFNumberOfStrips
vtktiff_TIFFNumberOfTiles
vtktiff_TIFFOpen
vtktiff_TIFFOpenW
vtktiff_TIFFPrintDirectory
vtktiff_TIFFRGBAImageBegin
vtktiff_TIFFRGBAImageEnd
vtktiff_TIFFRGBAImageGet
vtktiff_TIFFRGBAImageOK
vtktiff_TIFFRasterScanlineSize
vtktiff_TIFFRasterScanlineSize64
vtktiff_TIFFRawStripSize
vtktiff_TIFFRawStripSize64
vtktiff_TIFFReadBufferSetup
vtktiff_TIFFReadCustomDirectory
vtktiff_TIFFReadDirectory
vtktiff_TIFFReadEXIFDirectory
vtktiff_TIFFReadEncodedStrip
vtktiff_TIFFReadEncodedTile
vtktiff_TIFFReadFromUserBuffer
vtktiff_TIFFReadRGBAImage
vtktiff_TIFFReadRGBAImageOriented
vtktiff_TIFFReadRGBAStrip
vtktiff_TIFFReadRGBAStripExt
vtktiff_TIFFReadRGBATile
vtktiff_TIFFReadRGBATileExt
vtktiff_TIFFReadRawStrip
vtktiff_TIFFReadRawTile
vtktiff_TIFFReadScanline
vtktiff_TIFFReadTile
vtktiff_TIFFRegisterCODEC
vtktiff_TIFFReverseBits
vtktiff_TIFFRewriteDirectory
vtktiff_TIFFScanlineSize
vtktiff_TIFFScanlineSize64
vtktiff_TIFFSetClientInfo
vtktiff_TIFFSetClientdata
vtktiff_TIFFSetCompressionScheme
vtktiff_TIFFSetDirectory
vtktiff_TIFFSetErrorHandler
vtktiff_TIFFSetErrorHandlerExt
vtktiff_TIFFSetField
vtktiff_TIFFSetFileName
vtktiff_TIFFSetFileno
vtktiff_TIFFSetMode
vtktiff_TIFFSetSubDirectory
vtktiff_TIFFSetTagExtender
vtktiff_TIFFSetWarningHandler
vtktiff_TIFFSetWarningHandlerExt
vtktiff_TIFFSetWriteOffset
vtktiff_TIFFSetupStrips
vtktiff_TIFFStripSize
vtktiff_TIFFStripSize64
vtktiff_TIFFSwabArrayOfDouble
vtktiff_TIFFSwabArrayOfFloat
vtktiff_TIFFSwabArrayOfLong
vtktiff_TIFFSwabArrayOfLong8
vtktiff_TIFFSwabArrayOfShort
vtktiff_TIFFSwabArrayOfTriples
vtktiff_TIFFSwabDouble
vtktiff_TIFFSwabFloat
vtktiff_TIFFSwabLong
vtktiff_TIFFSwabLong8
vtktiff_TIFFSwabShort
vtktiff_TIFFTileRowSize
vtktiff_TIFFTileRowSize64
vtktiff_TIFFTileSize
vtktiff_TIFFTileSize64
vtktiff_TIFFUnRegisterCODEC
vtktiff_TIFFUnlinkDirectory
vtktiff_TIFFUnsetField
vtktiff_TIFFVGetField
vtktiff_TIFFVGetFieldDefaulted
vtktiff_TIFFVSetField
vtktiff_TIFFVStripSize
vtktiff_TIFFVStripSize64
vtktiff_TIFFVTileSize
vtktiff_TIFFVTileSize64
vtktiff_TIFFWarning
vtktiff_TIFFWarningExt
vtktiff_TIFFWriteBufferSetup
vtktiff_TIFFWriteCheck
vtktiff_TIFFWriteCustomDirectory
vtktiff_TIFFWriteDirectory
vtktiff_TIFFWriteEncodedStrip
vtktiff_TIFFWriteEncodedTile
vtktiff_TIFFWriteRawStrip
vtktiff_TIFFWriteRawTile
vtktiff_TIFFWriteScanline
vtktiff_TIFFWriteTile
vtktiff_TIFFXYZToRGB
vtktiff_TIFFYCbCrToRGBInit
vtktiff_TIFFYCbCrtoRGB
vtktiff_XYZtoRGB24
vtktiff__TIFFBuiltinCODECS
vtktiff__TIFFCastUInt64ToSSize
vtktiff__TIFFCheckMalloc
vtktiff__TIFFCheckRealloc
vtktiff__TIFFClampDoubleToFloat
vtktiff__TIFFDataSize
vtktiff__TIFFDefaultStripSize
vtktiff__TIFFDefaultTileSize
vtktiff__TIFFMultiply32
vtktiff__TIFFMultiply64
vtktiff__TIFFMultiplySSize
vtktiff__TIFFNoPostDecode
vtktiff__TIFFNoPreCode
vtktiff__TIFFNoRowDecode
vtktiff__TIFFNoRowEncode
vtktiff__TIFFNoSeek
vtktiff__TIFFNoStripDecode
vtktiff__TIFFNoStripEncode
vtktiff__TIFFNoTileDecode
vtktiff__TIFFNoTileEncode
vtktiff__TIFFReadEncodedStripAndAllocBuffer
vtktiff__TIFFReadEncodedTileAndAllocBuffer
vtktiff__TIFFReadTileAndAllocBuffer
vtktiff__TIFFRewriteField
vtktiff__TIFFSeekOK
vtktiff__TIFFSetDefaultCompressionState
vtktiff__TIFFSwab16BitData
vtktiff__TIFFSwab24BitData
vtktiff__TIFFSwab32BitData
vtktiff__TIFFSwab64BitData
vtktiff__TIFFUInt64ToDouble
vtktiff__TIFFUInt64ToFloat
vtktiff__TIFFcalloc
vtktiff__TIFFerrorHandler
vtktiff__TIFFerrorHandlerExt
vtktiff__TIFFfree
vtktiff__TIFFgetMode
vtktiff__TIFFmalloc
vtktiff__TIFFmemcmp
vtktiff__TIFFmemcpy
vtktiff__TIFFmemset
vtktiff__TIFFprintAscii
vtktiff__TIFFprintAsciiTag
vtktiff__TIFFrealloc
vtktiff__TIFFsetByteArray
vtktiff__TIFFsetDoubleArray
vtktiff__TIFFsetFloatArray
vtktiff__TIFFsetLongArray
vtktiff__TIFFsetShortArray
vtktiff__TIFFsetString
vtktiff__TIFFwarningHandler
vtktiff__TIFFwarningHandlerExt
vtktiff_uv_decode
vtktiff_uv_encode

Sections

.text
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebafc7e009cf88232c4d849d302165fe

Headers

DLL Characteristics

File Characteristics

Imports

vtkjpeg-9.0

vtkzlib-9.0

kernel32

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 221KB - Virtual size: 221KB

.rdata Size: 167KB - Virtual size: 167KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 10KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 704B

.text
Size: 221KB - Virtual size: 221KB

.rdata
Size: 167KB - Virtual size: 167KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 704B