cd183ae0a7cea1ba92ec366a6557a270_NEIKI

Sharing

Copy URL

Twitter E-mail

General

Target

cd183ae0a7cea1ba92ec366a6557a270_NEIKI
Size

2.5MB
MD5

cd183ae0a7cea1ba92ec366a6557a270
SHA1

6e0b0becef1c81ecad20b5e29e7bbe22da2164e2
SHA256

418439213f895f2fd34529b7f5895d36ef410c7c65695fba292d381e85a1d3c4
SHA512

c68e1bb4212ec8d107305639542e9e9fc6ed9571f960fc104facf7bf8c66386e2e7938e81ba4cf6851d7ec7ffa5d428a6afe3eb146341f47ae0a9260c63f89a8
SSDEEP

49152:Lb6xmnDiN+yBI/mQNpgAZb40zOaoiOPUGWomYL4:gmnD8BomYpLZ/zwiOMGWk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd183ae0a7cea1ba92ec366a6557a270_NEIKI

Files

cd183ae0a7cea1ba92ec366a6557a270_NEIKI
.dll windows:5 windows x86 arch:x86

c9f93910b9e39904c5717dbcd0df9168

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetMenuItemBitmaps
GetWindow
GetMessageA
GetWindowRgn
CheckMenuItem
IsWinEventHookInstalled
DrawIcon

oleaut32

SafeArrayAllocDescriptorEx
GetErrorInfo

ws2_32

WSAGetLastError

gdi32

GetWindowOrgEx
OffsetClipRgn
BeginPath
GetTextCharset
CreateRoundRectRgn

kernel32

TerminateProcess
CloseHandle
GetProcessShutdownParameters
ChangeTimerQueueTimer
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
DeleteCriticalSection
SetStdHandle
GetModuleFileNameW
GetBinaryTypeW
LoadLibraryExW
GetTimeFormatA
ConvertDefaultLocale
VerSetConditionMask
UnlockFileEx
SetConsoleCP

advapi32

RegQueryInfoKeyA
LookupPrivilegeNameW

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.code
Size: 320KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lq8zSJD
Size: 308KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hm299*2
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

=Womat6
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt0
Size: 180KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9f93910b9e39904c5717dbcd0df9168

Headers

File Characteristics

Imports

user32

oleaut32

ws2_32

gdi32

kernel32

advapi32

Sections

.text Size: 96KB - Virtual size: 93KB

.rdata Size: 4KB - Virtual size: 2KB

.code Size: 320KB - Virtual size: 321KB

lq8zSJD Size: 308KB - Virtual size: 305KB

hm299*2 Size: 1.3MB - Virtual size: 1.3MB

=Womat6 Size: 164KB - Virtual size: 161KB

.crt0 Size: 180KB - Virtual size: 177KB

.CRT Size: 4KB - Virtual size: 4B

.rsrc Size: 40KB - Virtual size: 38KB

DATA Size: 56KB - Virtual size: 53KB

.text
Size: 96KB - Virtual size: 93KB

.rdata
Size: 4KB - Virtual size: 2KB

.code
Size: 320KB - Virtual size: 321KB

lq8zSJD
Size: 308KB - Virtual size: 305KB

hm299*2
Size: 1.3MB - Virtual size: 1.3MB

=Womat6
Size: 164KB - Virtual size: 161KB

.crt0
Size: 180KB - Virtual size: 177KB

.CRT
Size: 4KB - Virtual size: 4B

.rsrc
Size: 40KB - Virtual size: 38KB

DATA
Size: 56KB - Virtual size: 53KB