d45c0549a39ae7d5441a6dd0948dcb00_NEIKI

Sharing

Copy URL

Twitter E-mail

General

Target

d45c0549a39ae7d5441a6dd0948dcb00_NEIKI
Size

472KB
MD5

d45c0549a39ae7d5441a6dd0948dcb00
SHA1

eff82ce63f5087f34af439a232f00be1441f74a0
SHA256

8fc184a9754ae6084d3da9889f912edc627d27a5ef2abe672dbc29120c56d165
SHA512

1c524bdaeeb6c449cca466091f73ea5555ba60d5466fd857b95d7cf276b77c0d702bfb9a6e08dd3f143eea62796d2b9019d12e4858facf90b122e0470e83f6cb
SSDEEP

12288:Iej5CK2CqyCNer8LYMzR9QbvLjM0s1haJPvywiy:1j5CKOyC9B5Vwiy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d45c0549a39ae7d5441a6dd0948dcb00_NEIKI

Files

d45c0549a39ae7d5441a6dd0948dcb00_NEIKI
.dll windows:5 windows x64 arch:x64

a981646dbcb18c39a74dc8962597d098

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Steve\Work\Dead Duck Free Effects\Source\Filter\Work\Release\x64\DD Filter.pdb

Imports

kernel32

FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapReAlloc
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
LockResource
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
IsValidCodePage
GlobalFree
GlobalUnlock
GetVersionExW
SizeofResource
GlobalLock
GlobalSize
LoadResource
MultiByteToWideChar
FindResourceA
WideCharToMultiByte
Sleep
GetTickCount
GetOEMCP
GetACP
GetCPInfo
ExitProcess
GetProcAddress
GetModuleHandleW
HeapDestroy
HeapCreate
HeapSetInformation
FlsAlloc
SetLastError
FlsFree
FlsGetValue
DecodePointer
EncodePointer
GetModuleFileNameA
GetStdHandle
WriteFile
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetCommandLineA
FlsSetValue
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
GetLastError

user32

GetDoubleClickTime
SetFocus
GetWindowLongPtrW
GetWindowRect
DestroyWindow
DefWindowProcW
MapWindowPoints
GetSystemMetrics
RegisterClassW
ReleaseCapture
GetCursor
GetCursorPos
SetWindowPos
GetWindowLongW
InvalidateRect
GetAsyncKeyState
GetDC
wsprintfW
BeginPaint
LoadCursorW
TrackMouseEvent
GetParent
GetFocus
GetKeyState
UnregisterClassW
SetCapture
GetUpdateRgn
SetCursor
EndPaint
MessageBoxW
GetClassNameW
SetWindowLongPtrW
PeekMessageW
DispatchMessageW
CreateWindowExW

gdi32

SetBkColor
CreateRectRgn
CreateSolidBrush
DeleteObject
SetTextColor

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

DragQueryFileW

ole32

RevokeDragDrop
CoCreateInstance
RegisterDragDrop
OleUninitialize
OleInitialize

gdiplus

GdipDrawImageRectRectI
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdipMeasureString
GdipCloneBrush
GdipDeletePen
GdipFree
GdipDeleteBrush
GdiplusShutdown
GdipSetTextRenderingHint
GdipGetImagePixelFormat
GdipGetFontHeightGivenDPI
GdipDeleteFont
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipGetDpiY
GdipSetClipRectI
GdipGetImageGraphicsContext
GdipSetSmoothingMode
GdipDeleteFontFamily
GdiplusStartup
GdipCreatePen1
GdipSetPixelOffsetMode
GdipGetImageWidth
GdipSetPenDashStyle
GdipDrawLineI
GdipCloneImage
GdipCreateBitmapFromResource
GdipSetInterpolationMode
GdipSetSolidFillColor
GdipCreateFromHDC
GdipCreateFontFamilyFromName
GdipFillRectangle
GdipDrawString
GdipDrawRectangle
GdipCreateImageAttributes
GdipGetGenericFontFamilySansSerif
GdipCreateBitmapFromHBITMAP
GdipSetPageUnit
GdipCreateFont
GdipSetPenWidth
GdipDisposeImage
GdipAlloc
GdipDisposeImageAttributes
GdipCreateBitmapFromStreamICM
GdipCreateSolidFill
GdipSetPenColor

Exports

Exports

VSTPluginMain
main

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a981646dbcb18c39a74dc8962597d098

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

gdiplus

Exports

Exports

Sections

.text Size: 145KB - Virtual size: 145KB

.rdata Size: 54KB - Virtual size: 53KB

.data Size: 10KB - Virtual size: 19KB

.pdata Size: 9KB - Virtual size: 9KB

.rsrc Size: 243KB - Virtual size: 242KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 145KB - Virtual size: 145KB

.rdata
Size: 54KB - Virtual size: 53KB

.data
Size: 10KB - Virtual size: 19KB

.pdata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 243KB - Virtual size: 242KB

.reloc
Size: 9KB - Virtual size: 8KB