crys
Static task
static1
Behavioral task
behavioral1
Sample
7916ca870d79d06da65ea4488b08d900_NEIKI.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7916ca870d79d06da65ea4488b08d900_NEIKI.dll
Resource
win10v2004-20240419-en
General
-
Target
7916ca870d79d06da65ea4488b08d900_NEIKI
-
Size
4KB
-
MD5
7916ca870d79d06da65ea4488b08d900
-
SHA1
64948aa86c0f801fe24bc15f5f2de0db94f82997
-
SHA256
f032037adb7613d2a85fc9a1b8294166e4c8a7871c8797ab52743d0170a0e316
-
SHA512
3eb5a265850bec08f02417fa9cfe29bdbcbf9c9fc1b9b91004ce81091b055dbb877ed28cc2cd10bd124e6208b23d483f84793ab12229551535937af69168227a
-
SSDEEP
48:SWkO0IoyTnXz+ihZjokMy0FlLp6ttmeGzksYMZ9OSxl:ZJTnXzvokEFlLp5usIY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7916ca870d79d06da65ea4488b08d900_NEIKI
Files
-
7916ca870d79d06da65ea4488b08d900_NEIKI.dll windows:5 windows x86 arch:x86
e97a70102cce77bfe0dc571cb46a4352
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateFileW
VirtualAlloc
ReadFile
user32
MessageBoxA
shell32
ShellExecuteW
msvcrt
_adjust_fdiv
free
_initterm
malloc
Exports
Exports
Sections
.text Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 482B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ