C:\devel\projects\mss\build\win\mss32.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ed993cdc4368860e73842e78e2ee4aa0_NEIKI.dll
Resource
win7-20240419-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
ed993cdc4368860e73842e78e2ee4aa0_NEIKI.dll
Resource
win10v2004-20240419-en
windows10-2004-x64
7 signatures
150 seconds
General
-
Target
ed993cdc4368860e73842e78e2ee4aa0_NEIKI
-
Size
500KB
-
MD5
ed993cdc4368860e73842e78e2ee4aa0
-
SHA1
151e625a490da7b2748f1c3158bba72512e1eeb8
-
SHA256
10f965592ce977bfffcef047e94ce4b8648b73eecc19013f903ee7fb2274c0c0
-
SHA512
eab393411d0b8ac5f427e565461b5949835f6472d8e65e9c6edb8dd9b8d7105ffe2f25bd5ba8059ece53ca45789673cd19e779c7f748ef1e4c6da41575ec1bdb
-
SSDEEP
12288:GVzZY53oco9gOItrFP/QrSvetzTbwoaHrmtcFGjPTBjvrEH7G:T5Yco9eP4SrSjhrEH7G
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed993cdc4368860e73842e78e2ee4aa0_NEIKI
Files
-
ed993cdc4368860e73842e78e2ee4aa0_NEIKI.dll windows:4 windows x86 arch:x86
7fabbcd3241199b1830a8abe506452a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
SetTimer
KillTimer
wsprintfA
GetActiveWindow
IsWindow
GetTopWindow
GetWindowThreadProcessId
GetWindow
GetForegroundWindow
MessageBoxA
GetWindowLongA
kernel32
SetEnvironmentVariableA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
InterlockedDecrement
GetLastError
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
GetWindowsDirectoryA
ReleaseMutex
CloseHandle
GetCurrentProcessId
Sleep
SuspendThread
ResumeThread
CreateEventA
CreateThread
GetSystemDirectoryA
SetThreadPriority
RaiseException
CreateDirectoryA
WaitForSingleObject
WaitForMultipleObjects
SetEvent
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
SetErrorMode
FreeLibrary
FindFirstFileA
GetProcAddress
DisableThreadLibraryCalls
FindClose
LoadLibraryA
FindNextFileA
SetFilePointer
ReadFile
CreateFileA
OpenFile
GetTempPathA
GetCurrentProcess
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
GetCurrentThread
OutputDebugStringA
DuplicateHandle
GetProfileStringA
lstrcatA
WriteFile
GlobalAlloc
GlobalFree
CompareStringW
CompareStringA
HeapSize
SetEndOfFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
VirtualAlloc
HeapReAlloc
TlsAlloc
InitializeCriticalSection
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
VirtualFree
HeapCreate
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
WideCharToMultiByte
GetTimeZoneInformation
TlsGetValue
HeapDestroy
winmm
waveOutGetID
waveOutClose
waveOutPrepareHeader
waveOutWrite
waveOutReset
waveOutGetDevCapsA
waveOutUnprepareHeader
waveOutOpen
waveInClose
waveInOpen
waveInAddBuffer
waveInReset
waveInUnprepareHeader
waveInStart
midiOutLongMsg
midiOutClose
midiOutShortMsg
midiOutOpen
midiOutReset
midiOutPrepareHeader
midiOutUnprepareHeader
timeGetTime
auxGetNumDevs
mixerOpen
auxGetVolume
mciSendCommandA
mixerSetControlDetails
mixerGetControlDetailsA
mixerGetNumDevs
auxGetDevCapsA
mixerClose
mixerGetLineInfoA
auxSetVolume
mixerGetLineControlsA
waveInPrepareHeader
Exports
Exports
AIL_debug_printf
AIL_sprintf
DLSClose
DLSCompactMemory
DLSGetInfo
DLSLoadFile
DLSLoadMemFile
DLSMSSOpen
DLSSetAttribute
DLSUnloadAll
DLSUnloadFile
RIB_alloc_provider_handle
RIB_enumerate_interface
RIB_error
RIB_find_file_provider
RIB_free_provider_handle
RIB_free_provider_library
RIB_load_provider_library
RIB_register_interface
RIB_request_interface
RIB_request_interface_entry
RIB_type_string
RIB_unregister_interface
_AIL_3D_distance_factor@4
_AIL_3D_doppler_factor@4
_AIL_3D_rolloff_factor@4
_AIL_DLS_close@8
_AIL_DLS_compact@4
_AIL_DLS_get_info@12
_AIL_DLS_load_file@12
_AIL_DLS_load_memory@12
_AIL_DLS_open@28
_AIL_DLS_sample_handle@4
_AIL_DLS_unload@8
_AIL_HWND@0
_AIL_MIDI_handle_reacquire@4
_AIL_MIDI_handle_release@4
_AIL_MIDI_to_XMI@20
_AIL_MMX_available@0
_AIL_WAV_file_write@20
_AIL_WAV_info@8
_AIL_XMIDI_master_volume@4
_AIL_active_sample_count@4
_AIL_active_sequence_count@4
_AIL_allocate_sample_handle@4
_AIL_allocate_sequence_handle@4
_AIL_auto_service_stream@8
_AIL_background@0
_AIL_background_CPU_percent@0
_AIL_branch_index@8
_AIL_calculate_3D_channel_levels@56
_AIL_channel_notes@8
_AIL_close_XMIDI_driver@4
_AIL_close_digital_driver@4
_AIL_close_filter@4
_AIL_close_input@4
_AIL_close_stream@4
_AIL_compress_ADPCM@12
_AIL_compress_ASI@20
_AIL_compress_DLS@20
_AIL_controller_value@12
_AIL_create_wave_synthesizer@16
_AIL_decompress_ADPCM@12
_AIL_decompress_ASI@24
_AIL_delay@4
_AIL_destroy_wave_synthesizer@4
_AIL_digital_CPU_percent@4
_AIL_digital_configuration@16
_AIL_digital_driver_processor@8
_AIL_digital_handle_reacquire@4
_AIL_digital_handle_release@4
_AIL_digital_latency@4
_AIL_digital_master_reverb@16
_AIL_digital_master_reverb_levels@12
_AIL_digital_master_volume_level@4
_AIL_digital_output_filter@4
_AIL_end_sample@4
_AIL_end_sequence@4
_AIL_enumerate_MP3_frames@4
_AIL_enumerate_filter_properties@12
_AIL_enumerate_filter_sample_properties@12
_AIL_enumerate_filters@12
_AIL_enumerate_output_filter_driver_properties@12
_AIL_enumerate_output_filter_sample_properties@12
_AIL_enumerate_sample_stage_properties@16
_AIL_extract_DLS@28
_AIL_file_error@0
_AIL_file_read@8
_AIL_file_size@4
_AIL_file_type@8
_AIL_file_type_named@12
_AIL_file_write@12
_AIL_filter_DLS_with_XMI@24
_AIL_filter_property@20
_AIL_find_DLS@24
_AIL_find_filter@8
_AIL_ftoa@4
_AIL_get_DirectSound_info@12
_AIL_get_input_info@4
_AIL_get_preference@4
_AIL_get_timer_highest_delay@0
_AIL_init_sample@12
_AIL_init_sequence@12
_AIL_inspect_MP3@12
_AIL_last_error@0
_AIL_list_DLS@20
_AIL_list_MIDI@20
_AIL_listener_3D_orientation@28
_AIL_listener_3D_position@16
_AIL_listener_3D_velocity@16
_AIL_listener_relative_receiver_array@8
_AIL_load_sample_attributes@8
_AIL_load_sample_buffer@16
_AIL_lock@0
_AIL_lock_channel@4
_AIL_lock_mutex@0
_AIL_map_sequence_channel@12
_AIL_mem_alloc_lock@4
_AIL_mem_free_lock@4
_AIL_mem_use_free@4
_AIL_mem_use_malloc@4
_AIL_merge_DLS_with_XMI@16
_AIL_midiOutClose@4
_AIL_midiOutOpen@12
_AIL_minimum_sample_buffer_size@12
_AIL_ms_count@0
_AIL_open_XMIDI_driver@4
_AIL_open_digital_driver@16
_AIL_open_filter@8
_AIL_open_input@4
_AIL_open_stream@12
_AIL_output_filter_driver_property@20
_AIL_pause_stream@8
_AIL_platform_property@20
_AIL_primary_digital_driver@4
_AIL_process_digital_audio@24
_AIL_quick_copy@4
_AIL_quick_halt@4
_AIL_quick_handles@12
_AIL_quick_load@4
_AIL_quick_load_and_play@12
_AIL_quick_load_mem@8
_AIL_quick_load_named_mem@12
_AIL_quick_ms_length@4
_AIL_quick_ms_position@4
_AIL_quick_play@8
_AIL_quick_set_low_pass_cut_off@8
_AIL_quick_set_ms_position@8
_AIL_quick_set_reverb_levels@12
_AIL_quick_set_speed@8
_AIL_quick_set_volume@12
_AIL_quick_shutdown@0
_AIL_quick_startup@20
_AIL_quick_status@4
_AIL_quick_type@4
_AIL_quick_unload@4
_AIL_redbook_close@4
_AIL_redbook_eject@4
_AIL_redbook_id@4
_AIL_redbook_open@4
_AIL_redbook_open_drive@4
_AIL_redbook_pause@4
_AIL_redbook_play@12
_AIL_redbook_position@4
_AIL_redbook_resume@4
_AIL_redbook_retract@4
_AIL_redbook_set_volume_level@8
_AIL_redbook_status@4
_AIL_redbook_stop@4
_AIL_redbook_track@4
_AIL_redbook_track_info@16
_AIL_redbook_tracks@4
_AIL_redbook_volume_level@4
_AIL_register_EOB_callback@8
_AIL_register_EOS_callback@8
_AIL_register_ICA_array@8
_AIL_register_SOB_callback@8
_AIL_register_beat_callback@8
_AIL_register_event_callback@8
_AIL_register_falloff_function_callback@8
_AIL_register_prefix_callback@8
_AIL_register_sequence_callback@8
_AIL_register_stream_callback@8
_AIL_register_timbre_callback@8
_AIL_register_timer@4
_AIL_register_trace_callback@8
_AIL_register_trigger_callback@8
_AIL_release_all_timers@0
_AIL_release_channel@8
_AIL_release_sample_handle@4
_AIL_release_sequence_handle@4
_AIL_release_timer_handle@4
_AIL_request_EOB_ASI_reset@12
_AIL_resume_sample@4
_AIL_resume_sequence@4
_AIL_room_type@4
_AIL_sample_3D_cone@16
_AIL_sample_3D_distances@16
_AIL_sample_3D_orientation@28
_AIL_sample_3D_position@16
_AIL_sample_3D_velocity@16
_AIL_sample_51_volume_levels@28
_AIL_sample_51_volume_pan@24
_AIL_sample_buffer_info@20
_AIL_sample_buffer_ready@4
_AIL_sample_channel_levels@8
_AIL_sample_exclusion@4
_AIL_sample_granularity@4
_AIL_sample_loop_block@12
_AIL_sample_loop_count@4
_AIL_sample_low_pass_cut_off@4
_AIL_sample_ms_position@12
_AIL_sample_obstruction@4
_AIL_sample_occlusion@4
_AIL_sample_playback_rate@4
_AIL_sample_position@4
_AIL_sample_processor@8
_AIL_sample_reverb_levels@12
_AIL_sample_stage_property@24
_AIL_sample_status@4
_AIL_sample_user_data@8
_AIL_sample_volume_levels@12
_AIL_sample_volume_pan@12
_AIL_save_sample_attributes@8
_AIL_send_channel_voice_message@20
_AIL_send_sysex_message@8
_AIL_sequence_loop_count@4
_AIL_sequence_ms_position@12
_AIL_sequence_position@12
_AIL_sequence_status@4
_AIL_sequence_tempo@4
_AIL_sequence_user_data@8
_AIL_sequence_volume@4
_AIL_serve@0
_AIL_service_stream@8
_AIL_set_3D_distance_factor@8
_AIL_set_3D_doppler_factor@8
_AIL_set_3D_rolloff_factor@8
_AIL_set_DirectSound_HWND@8
_AIL_set_XMIDI_master_volume@8
_AIL_set_digital_driver_processor@12
_AIL_set_digital_master_reverb@16
_AIL_set_digital_master_reverb_levels@12
_AIL_set_digital_master_volume_level@8
_AIL_set_error@4
_AIL_set_file_async_callbacks@20
_AIL_set_file_callbacks@16
_AIL_set_input_state@8
_AIL_set_listener_3D_orientation@28
_AIL_set_listener_3D_position@16
_AIL_set_listener_3D_velocity@20
_AIL_set_listener_3D_velocity_vector@16
_AIL_set_listener_relative_receiver_array@12
_AIL_set_named_sample_file@20
_AIL_set_preference@8
_AIL_set_redist_directory@4
_AIL_set_room_type@8
_AIL_set_sample_3D_cone@16
_AIL_set_sample_3D_distances@16
_AIL_set_sample_3D_orientation@28
_AIL_set_sample_3D_position@16
_AIL_set_sample_3D_velocity@20
_AIL_set_sample_3D_velocity_vector@16
_AIL_set_sample_51_volume_levels@28
_AIL_set_sample_51_volume_pan@24
_AIL_set_sample_address@12
_AIL_set_sample_adpcm_block_size@8
_AIL_set_sample_channel_levels@12
_AIL_set_sample_exclusion@8
_AIL_set_sample_file@12
_AIL_set_sample_info@8
_AIL_set_sample_loop_block@12
_AIL_set_sample_loop_count@8
_AIL_set_sample_low_pass_cut_off@8
_AIL_set_sample_ms_position@8
_AIL_set_sample_obstruction@8
_AIL_set_sample_occlusion@8
_AIL_set_sample_playback_rate@8
_AIL_set_sample_position@8
_AIL_set_sample_processor@12
_AIL_set_sample_reverb_levels@12
_AIL_set_sample_user_data@12
_AIL_set_sample_volume_levels@12
_AIL_set_sample_volume_pan@12
_AIL_set_sequence_loop_count@8
_AIL_set_sequence_ms_position@8
_AIL_set_sequence_tempo@12
_AIL_set_sequence_user_data@12
_AIL_set_sequence_volume@12
_AIL_set_speaker_configuration@16
_AIL_set_speaker_reverb_levels@16
_AIL_set_stream_loop_block@12
_AIL_set_stream_loop_count@8
_AIL_set_stream_ms_position@8
_AIL_set_stream_position@8
_AIL_set_stream_user_data@12
_AIL_set_timer_divisor@8
_AIL_set_timer_frequency@8
_AIL_set_timer_period@8
_AIL_set_timer_user@8
_AIL_shutdown@0
_AIL_size_processed_digital_audio@16
_AIL_speaker_configuration@20
_AIL_speaker_reverb_levels@16
_AIL_start_all_timers@0
_AIL_start_sample@4
_AIL_start_sequence@4
_AIL_start_stream@4
_AIL_start_timer@4
_AIL_startup@0
_AIL_stop_all_timers@0
_AIL_stop_sample@4
_AIL_stop_sequence@4
_AIL_stop_timer@4
_AIL_stream_info@20
_AIL_stream_loop_count@4
_AIL_stream_ms_position@12
_AIL_stream_position@4
_AIL_stream_sample_handle@4
_AIL_stream_status@4
_AIL_stream_user_data@8
_AIL_true_sequence_channel@8
_AIL_unlock@0
_AIL_unlock_mutex@0
_AIL_update_listener_3D_position@8
_AIL_update_sample_3D_position@8
_AIL_us_count@0
_DLSMSSGetCPU@4
_MIX_RIB_MAIN@8
_MSSDisableThreadLibraryCalls@4
_RIB_enumerate_providers@12
_RIB_find_file_dec_provider@20
_RIB_find_files_provider@20
_RIB_find_provider@12
_RIB_load_application_providers@4
_RIB_load_static_provider_library@8
_RIB_provider_system_data@8
_RIB_provider_user_data@8
_RIB_set_provider_system_data@12
_RIB_set_provider_user_data@12
Sections
.text Size: 275KB - Virtual size: 275KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
MSSMIXER Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ