ae2ebc92507e900bc1849023302046b0_NEIKI

Sharing

Copy URL Twitter E-mail

General

Target

ae2ebc92507e900bc1849023302046b0_NEIKI
Size

576KB
MD5

ae2ebc92507e900bc1849023302046b0
SHA1

c76d7aea0fb568d876c175a188800df70060751e
SHA256

ba311ebd3897320114267ce74d0dc3a9ab0479addc0a736c97eb8d0e5322f015
SHA512

14c5d678d3607168f55f3319b1fca36a6cd83bc306f3c19eeb8c80b4a3ce1206487fb2f110a1aeadf12ee0c53e17ad7e6f30209928cacf7c0c360154f9f517b1
SSDEEP

12288:w8G7fkwGg8xciNCHWFtyvddmU/tN82PKKp9OyRGvyrTXx:48wGg8bWmtyvjmU/thPKKb7ov0jx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae2ebc92507e900bc1849023302046b0_NEIKI

Files

ae2ebc92507e900bc1849023302046b0_NEIKI
.dll windows:4 windows x86 arch:x86

17238809d9955404a90ccc21291c91ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA

wsock32

WSAStartup
gethostname
gethostbyname
inet_addr
WSACleanup

wininet

HttpQueryInfoA
InternetSetCookieA
HttpOpenRequestA
InternetConnectA
HttpSendRequestA
InternetErrorDlg
InternetSetOptionA
InternetCloseHandle
InternetReadFile
InternetQueryDataAvailable
InternetOpenA
InternetQueryOptionA

wmvcore

WMCreateSyncReader

winmm

mmioRead
mmioDescend
mmioOpenA
mmioAscend
mmioSeek
mmioClose

mfc42

ord537
ord6467
ord800
ord535
ord858
ord4129
ord5683
ord4278
ord922
ord923
ord940
ord5710
ord536
ord6153
ord3790
ord540
ord924
ord2818
ord2763
ord1168
ord3663
ord939
ord5572
ord2915
ord2614
ord3810
ord823
ord6197
ord6283
ord6282
ord1567
ord268
ord1979
ord6385
ord665
ord5186
ord354
ord801
ord541
ord941
ord5651
ord3127
ord860
ord6883
ord350
ord6143
ord641
ord2514
ord4204
ord5265
ord4998
ord6052
ord1775
ord5280
ord4425
ord3597
ord6055
ord4078
ord1776
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord3402
ord4627
ord3698
ord567
ord324
ord765
ord2302
ord4234
ord4376
ord2379
ord4710
ord3092
ord5953
ord4853
ord3097
ord2820
ord3811
ord6215
ord2086
ord926
ord1199
ord668
ord1980
ord551
ord3310
ord3178
ord4058
ord3181
ord2781
ord2770
ord356
ord815
ord5442
ord3318
ord6877
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord3953
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord269
ord826
ord600
ord1578
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord1116
ord3616
ord2814

msvcrt

memcpy
memset
strncat
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
frexp
exit
ldexp
qsort
ceil
floor
memchr
_CIpow
strncmp
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
_stati64
sprintf
fflush
isdigit
ftell
fseek
fopen
fclose
fwrite
fread
_iob
fprintf
calloc
printf
_mbsstr
strlen
memmove
realloc
malloc
free
atoi
_mbctype
_access
_ftol
_mbsicmp
_mbscmp
__CxxFrameHandler
_strdup
_EH_prolog
_errno
_atoi64
_filelength
_fileno

kernel32

GetDriveTypeA
GetDiskFreeSpaceA
CreateDirectoryA
FindFirstFileA
RemoveDirectoryA
FindNextFileA
FindClose
DeleteFileA
GetModuleFileNameA
GetLastError
WideCharToMultiByte
HeapDestroy
HeapFree
HeapAlloc
MultiByteToWideChar
CloseHandle
CreateFileA
ReadFile
SetFilePointer
GetFileSize
InterlockedIncrement
InterlockedDecrement
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
FormatMessageA
GetLocalTime
ExpandEnvironmentStringsA
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
WaitForSingleObject
CreateProcessA
GetVolumeInformationA
LocalFree
LocalAlloc
lstrlenA
DeleteCriticalSection
HeapCreate
InitializeCriticalSection

user32

UpdateWindow
SendMessageA
SetTimer
GetSystemMetrics
PeekMessageA
TranslateMessage
DispatchMessageA
EnableWindow
GetDesktopWindow
GetWindowRect

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ole32

CoUninitialize
CoInitialize

oleaut32

SysAllocStringLen

msvcp60

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Xlen@std@@YAXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z

Exports

Exports

DownCancel
Download
End
GetFileFormat
Init
UnzipCancel
UnzipStatus
Upload
VideoPaidReport

Sections

.text
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17238809d9955404a90ccc21291c91ad

Headers

File Characteristics

Imports

version

wsock32

wininet

wmvcore

winmm

mfc42

msvcrt

kernel32

user32

advapi32

ole32

oleaut32

msvcp60

Exports

Exports

Sections

.text Size: 320KB - Virtual size: 319KB

.rdata Size: 128KB - Virtual size: 126KB

.data Size: 88KB - Virtual size: 215KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 32KB - Virtual size: 30KB

.text
Size: 320KB - Virtual size: 319KB

.rdata
Size: 128KB - Virtual size: 126KB

.data
Size: 88KB - Virtual size: 215KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 32KB - Virtual size: 30KB