e8af8964b1e6c30b22d33001eece5250_NEIKI

Sharing

Copy URL Twitter E-mail

General

Target

e8af8964b1e6c30b22d33001eece5250_NEIKI
Size

744KB
MD5

e8af8964b1e6c30b22d33001eece5250
SHA1

efa885392c23682529845ebda47d6bc2dca75f03
SHA256

339103479fbb06914a096a22381c09f05950bc3952f1e30cf6bea1adf841d30a
SHA512

655bfe494b8164ce2528d10b0144de383ffe03fa66ce609bf6b2599d1c4dfaa89dc08e9957448007b481c2da4f2ebacb53b768c276836e3fe96bc1e0d53e7a23
SSDEEP

12288:pjl4znBPNZI3XPWvOYRcDRJZ4w8qIV8mQR8XZi/mWcSjpI0Tkdure6:ZlyBFW+vxWJq0Q7QqtWLjXTqM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8af8964b1e6c30b22d33001eece5250_NEIKI

Files

e8af8964b1e6c30b22d33001eece5250_NEIKI
.exe windows:10 windows x64 arch:x64

1a6139bca24492ee5163ffe299aaa6f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

DXCapsViewer.pdb

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryExA
WriteFile
HeapFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetNumberFormatA
GetCommandLineA
GetProcessHeap
HeapAlloc
CloseHandle
CreateFileA
GetLocaleInfoA
LocalAlloc
GetEnvironmentVariableA
GetModuleHandleA
Sleep
GetStartupInfoW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
ExpandEnvironmentStringsA
GetModuleFileNameA

gdi32

EndDoc
StartPage
StartDocA
GetDeviceCaps
DeleteDC
GetTextMetricsA
CreateFontIndirectA
TextOutA
SelectObject
EndPage
SetAbortProc

user32

ScreenToClient
PostMessageA
GetDC
DestroyWindow
LoadCursorA
GetMenu
DispatchMessageA
LoadImageA
GetMessageA
LoadMenuA
DeferWindowPos
EnableWindow
GetParent
EnableMenuItem
GetWindowLongPtrA
PeekMessageA
CreateDialogParamA
IsDialogMessageA
LoadStringA
GetSystemMenu
DestroyIcon
GetSystemMetrics
CloseClipboard
EmptyClipboard
GetWindowTextA
SetWindowTextA
MessageBoxA
RegisterClassA
DefWindowProcA
DestroyMenu
CreateWindowExA
SetFocus
TranslateMessage
SendMessageA
SetCapture
EndDeferWindowPos
SetClipboardData
LoadIconA
SystemParametersInfoA
CheckMenuItem
GetClientRect
GetDlgItem
PostQuitMessage
EndDialog
DialogBoxParamA
TrackPopupMenu
OpenClipboard
GetSubMenu
SetMenuItemInfoA
GetMenuStringA
ReleaseCapture
InvalidateRect
IsIconic
ReleaseDC
GetCursorPos
BeginDeferWindowPos
ShowWindow

msvcrt

strcpy_s
vsprintf_s
?terminate@@YAXXZ
_commode
_fmode
_acmdln
__C_specific_handler
__setusermatherr
_initterm
memset
_ismbblead
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
free
_callnewh
malloc
wcstombs
sprintf_s
strrchr
strcat_s

comctl32

ImageList_ReplaceIcon
ImageList_Create
ord4
ImageList_Destroy
ord17

comdlg32

PrintDlgA

ole32

CoInitialize
CoUninitialize

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

shell32

SHGetFolderPathA

shlwapi

PathFileExistsA
PathRemoveFileSpecA
PathAppendA

ddraw

DirectDrawEnumerateExA
DirectDrawCreateEx

d3d9

Direct3DCreate9

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1a6139bca24492ee5163ffe299aaa6f6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

gdi32

user32

msvcrt

comctl32

comdlg32

ole32

version

shell32

shlwapi

ddraw

d3d9

advapi32

Sections

.text Size: 79KB - Virtual size: 79KB

.rdata Size: 38KB - Virtual size: 38KB

.data Size: 25KB - Virtual size: 28KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 30KB - Virtual size: 30KB

.reloc Size: 568KB - Virtual size: 572KB

.text
Size: 79KB - Virtual size: 79KB

.rdata
Size: 38KB - Virtual size: 38KB

.data
Size: 25KB - Virtual size: 28KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 30KB - Virtual size: 30KB

.reloc
Size: 568KB - Virtual size: 572KB