Constructor
Static task
static1
Behavioral task
behavioral1
Sample
1c96a5fe466f203a01e827c49e128b80_NEIKI.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c96a5fe466f203a01e827c49e128b80_NEIKI.dll
Resource
win10v2004-20240426-en
General
-
Target
1c96a5fe466f203a01e827c49e128b80_NEIKI
-
Size
87KB
-
MD5
1c96a5fe466f203a01e827c49e128b80
-
SHA1
6863c120d580fc496dd7152437ad6d8ef6c35984
-
SHA256
7b1a6263112d70cc64a555212847f174c80a0f3fbf3a1b6713e11b24176c0b0a
-
SHA512
99c1e0012a77a59685ffa6023bec6cf199903e77583fc600cee01353f89cbed934384bb91b7cfc2ca01de796031b20dca5681e220dddf3be1c4d067600c102eb
-
SSDEEP
1536:gN+soU7Vac0478sPap6Tyk1+NVqJX7g0RjV0TSSDuGjzPupp3d0/AJJJJJJJahAx:+aUWkYNQd7gqjV021kGzOoJJJJJJJahX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c96a5fe466f203a01e827c49e128b80_NEIKI
Files
-
1c96a5fe466f203a01e827c49e128b80_NEIKI.dll windows:4 windows x86 arch:x86
765a0b7e89ced0c1b81abd287918523a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetOEMCP
VirtualUnlock
GlobalFree
VirtualLock
GetTickCount
RtlUnwind
RaiseException
GetCommandLineA
GetProcAddress
GetModuleHandleA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GlobalAlloc
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
LoadLibraryA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FlushFileBuffers
GetLocaleInfoA
GetLocaleInfoW
CloseHandle
SetStdHandle
SetFilePointer
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ