397ddf060cd3f520b23eff998be62710_NEIKI

Sharing

Copy URL

Twitter E-mail

General

Target

397ddf060cd3f520b23eff998be62710_NEIKI
Size

184KB
MD5

397ddf060cd3f520b23eff998be62710
SHA1

a9460d4400a7b8e189db1feda12c22d001c8efab
SHA256

f5eec2a1dce09abc0bb4925438956e259c6a3531bad030cf3bb4caf5afea3476
SHA512

ee30c4524e9492966d138826dbb68f48af2b5d1e0675bd9341230427efd549ca2ad6b329239d5cef3cfdfcf5ec932d0b3cca6d85912376d0acf4aedf2263b93d
SSDEEP

3072:+52VkMnCCo2BOFQGyeDCxXH1HAOdbQMhd3raQVp0Uo27/yLrc2h5:+52VkMnCNZ14XHn1byL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
397ddf060cd3f520b23eff998be62710_NEIKI

Files

397ddf060cd3f520b23eff998be62710_NEIKI
.dll windows:4 windows x86 arch:x86

1e5d1860169f1762113cfaa4a989e33a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCommandLineA
ExitProcess
TerminateProcess
HeapFree
CreateThread
ExitThread
HeapAlloc
RaiseException
GetACP
HeapSize
HeapReAlloc
GetTimeZoneInformation
SetStdHandle
GetFileType
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
RtlUnwind
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetOEMCP
GetCPInfo
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProcessVersion
WritePrivateProfileStringA
GlobalFlags
MulDiv
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
EnterCriticalSection
LocalFree
FreeLibrary
GlobalFindAtomA
GetModuleHandleA
GlobalFree
LockResource
FindResourceA
LoadResource
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
lstrcatA
GlobalUnlock
GlobalGetAtomNameA
GlobalAddAtomA
GetVersion
GetFileTime
GetFileSize
GetFileAttributesA
GetLastError
SetLastError
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
lstrlenA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
CreateEventA
SuspendThread
SetThreadPriority
SetEvent
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetTickCount
DeleteFileA
ResumeThread
WaitForSingleObject
CreateDirectoryA
HeapDestroy

user32

GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
RegisterClassA
GetTopWindow
AdjustWindowRectEx
GetSysColor
MapWindowPoints
UnregisterClassA
GetClassNameA
PtInRect
ClientToScreen
TabbedTextOutA
DrawTextA
GrayStringA
LoadCursorA
GetSysColorBrush
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetClientRect
GetDC
ReleaseDC
EndDialog
CreateDialogIndirectParamA
DestroyWindow
LoadStringA
UnhookWindowsHookEx
IsIconic
CopyRect
UpdateWindow
GetMenuItemCount
GetSubMenu
GetMessagePos
SetActiveWindow
WinHelpA
GetMenu
LoadIconA
GetClassInfoA
DestroyMenu
IsWindow
GetWindow
GetCapture
RegisterWindowMessageA
GetSystemMetrics
CharUpperA
wsprintfA
ShowWindow
SetWindowPos
SetWindowLongA
GetDlgCtrlID
GetWindowTextA
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
SetCursor
PostMessageA
PostQuitMessage
PeekMessageA
DispatchMessageA
TranslateMessage
GetForegroundWindow
SetForegroundWindow
GetMenuItemID
SendMessageA
MessageBoxA
EnableWindow
SetFocus

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
DeleteObject
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA

comctl32

ord17

wininet

InternetCloseHandle
InternetReadFile
HttpQueryInfoA
InternetErrorDlg
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetSetStatusCallback
InternetOpenA
InternetCrackUrlA
InternetCanonicalizeUrlA

Exports

Exports

DownloadAggiornamentoArchivio
DownloadAggiornamentoArchivioEx
DownloadAggiornamentoArchivioExNw
DownloadAggiornamentoPalinsesti
DownloadAggiornamentoPalinsestiEx
DownloadFiles

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1e5d1860169f1762113cfaa4a989e33a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

wininet

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 100KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 16KB - Virtual size: 28KB

.rsrc Size: 16KB - Virtual size: 13KB

.reloc Size: 20KB - Virtual size: 17KB

.text
Size: 104KB - Virtual size: 100KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 16KB - Virtual size: 28KB

.rsrc
Size: 16KB - Virtual size: 13KB

.reloc
Size: 20KB - Virtual size: 17KB