c:\graphviz-ms\graphviz2\lib\ann\MS_Win32\dll\Debug\ANN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1c704d85e78b7db2be27b91b69f9e060_NEIKI.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c704d85e78b7db2be27b91b69f9e060_NEIKI.dll
Resource
win10v2004-20240226-en
General
-
Target
1c704d85e78b7db2be27b91b69f9e060_NEIKI
-
Size
923KB
-
MD5
1c704d85e78b7db2be27b91b69f9e060
-
SHA1
cb7eae18c4b15c52b3fbb9761886e0a0713da495
-
SHA256
07da8503c5a4ba5d0127b1750ed3504c59b66c5f3ea1e57f50a6f849d16f1d69
-
SHA512
879b5ffd90df3724ec248db3795d7b3508dd91d4cdd2d9f7f072e4f62ae721692054e697cabb160882170aac293067fba9aa3e4d7ee759a6056199e1ac8e78de
-
SSDEEP
12288:6UfaIL0tsuL960svDR9miXSldDMYX73pAmDiG346oNXaDAqwEIGyPY3YWTDlHIyp:6cYJU0sDLmiil2Yr51orBcVOPYFH7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c704d85e78b7db2be27b91b69f9e060_NEIKI
Files
-
1c704d85e78b7db2be27b91b69f9e060_NEIKI.dll windows:5 windows x86 arch:x86
a712fec8584b0165f616febe186def20
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
InterlockedCompareExchange
GetModuleHandleW
GetProcAddress
ExitProcess
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameW
GetCurrentThreadId
GetCommandLineA
HeapValidate
IsBadReadPtr
GetCPInfo
LCMapStringA
GetLastError
LCMapStringW
GetModuleFileNameA
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
FatalAppExitA
DebugBreak
lstrlenA
LoadLibraryA
GetModuleHandleA
GetACP
GetOEMCP
IsValidCodePage
SetConsoleCtrlHandler
FreeLibrary
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
WriteConsoleW
GetFileType
OutputDebugStringW
LoadLibraryW
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
HeapFree
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointer
FlushFileBuffers
CloseHandle
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
GetProcessHeap
VirtualQuery
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
GetTimeZoneInformation
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
Exports
Exports
??0ANNbd_tree@@QAE@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z
??0ANNbd_tree@@QAE@ABV0@@Z
??0ANNbd_tree@@QAE@HHH@Z
??0ANNbd_tree@@QAE@PAPANHHHW4ANNsplitRule@@W4ANNshrinkRule@@@Z
??0ANNbruteForce@@QAE@ABV0@@Z
??0ANNbruteForce@@QAE@PAPANHH@Z
??0ANNkd_tree@@QAE@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z
??0ANNkd_tree@@QAE@ABV0@@Z
??0ANNkd_tree@@QAE@HHH@Z
??0ANNkd_tree@@QAE@PAPANHHHW4ANNsplitRule@@@Z
??0ANNpointSet@@QAE@ABV0@@Z
??0ANNpointSet@@QAE@XZ
??0ANNsampStat@@QAE@XZ
??1ANNbd_tree@@UAE@XZ
??1ANNbruteForce@@UAE@XZ
??1ANNkd_tree@@UAE@XZ
??1ANNpointSet@@UAE@XZ
??4ANNbd_tree@@QAEAAV0@ABV0@@Z
??4ANNbruteForce@@QAEAAV0@ABV0@@Z
??4ANNkd_tree@@QAEAAV0@ABV0@@Z
??4ANNpointSet@@QAEAAV0@ABV0@@Z
??4ANNsampStat@@QAEAAV0@ABV0@@Z
??YANNsampStat@@QAEXN@Z
??_7ANNbd_tree@@6B@
??_7ANNbruteForce@@6B@
??_7ANNkd_tree@@6B@
??_7ANNpointSet@@6B@
??_FANNkd_tree@@QAEXXZ
?Dump@ANNkd_tree@@UAEXW4ANNbool@@AAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
?Print@ANNkd_tree@@UAEXW4ANNbool@@AAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
?SkeletonTree@ANNkd_tree@@IAEXHHHPAPANPAH@Z
?annAllocPt@@YAPANHN@Z
?annAllocPts@@YAPAPANHH@Z
?annClose@@YAXXZ
?annCopyPt@@YAPANHPAN@Z
?annDeallocPt@@YAXAAPAN@Z
?annDeallocPts@@YAXAAPAPAN@Z
?annDist@@YANHPAN0@Z
?annMaxPtsVisit@@YAXH@Z
?annPrintStats@@YAXW4ANNbool@@@Z
?annResetCounts@@YAXXZ
?annResetStats@@YAXH@Z
?annUpdateStats@@YAXXZ
?ann_average_err@@3VANNsampStat@@A
?ann_rank_err@@3VANNsampStat@@A
?annkFRSearch@ANNbruteForce@@UAEHPANNHPAH0N@Z
?annkFRSearch@ANNkd_tree@@UAEHPANNHPAH0N@Z
?annkPriSearch@ANNkd_tree@@QAEXPANHPAH0N@Z
?annkSearch@ANNbruteForce@@UAEXPANHPAH0N@Z
?annkSearch@ANNkd_tree@@UAEXPANHPAH0N@Z
?getStats@ANNkd_tree@@UAEXAAVANNkdStats@@@Z
?max@ANNsampStat@@QAENXZ
?mean@ANNsampStat@@QAENXZ
?min@ANNsampStat@@QAENXZ
?nPoints@ANNbruteForce@@UAEHXZ
?nPoints@ANNkd_tree@@UAEHXZ
?reset@ANNsampStat@@QAEXXZ
?samples@ANNsampStat@@QAEHXZ
?stdDev@ANNsampStat@@QAENXZ
?theDim@ANNbruteForce@@UAEHXZ
?theDim@ANNkd_tree@@UAEHXZ
?thePoints@ANNbruteForce@@UAEPAPANXZ
?thePoints@ANNkd_tree@@UAEPAPANXZ
Sections
.textbss Size: - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 561KB - Virtual size: 561KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 250KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ