DllCanUnloadNow
DllGetClassObject
DllGetData2
DllRegisterServer
GreatBall
GreatBall1
Static task
static1
Behavioral task
behavioral1
Sample
24ec50a83c2cda048730e3e92c32f6d0_NEIKI.dll
Resource
win7-20240221-en
Target
24ec50a83c2cda048730e3e92c32f6d0_NEIKI
Size
168KB
MD5
24ec50a83c2cda048730e3e92c32f6d0
SHA1
3760186fc75107726582b5a94deefeef7b66a2c9
SHA256
bd8fa6a9d078bf68de97ba175643a2e15abdcbe72c63c702d07d7741c39d03f4
SHA512
3c2924aa2f0b49008f7bc57efe15778996580fc4d900d229d224fce8e4013e177ba3c8b6154d23304b537f3ab21bd28f821ad29a22efd1927fe6658c9b0ed167
SSDEEP
3072:tv0ywsQjcSofDj3sRrH2jgXoeOmojbKs7QP7CY:t8RKTsRzdhO/NEP
Checks for missing Authenticode signature.
resource |
---|
24ec50a83c2cda048730e3e92c32f6d0_NEIKI |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetCloseHandle
HttpAddRequestHeadersA
HttpSendRequestA
InternetConnectA
InternetAttemptConnect
HttpQueryInfoA
InternetCrackUrlA
InternetOpenA
InternetOpenUrlA
InternetReadFile
HttpOpenRequestA
GetSystemTime
CloseHandle
CreateFileA
GetVersion
WaitForSingleObject
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
FreeLibrary
LoadLibraryA
GetFileAttributesA
DeleteFileA
GetTempPathA
GetSystemDirectoryA
OpenMutexA
CreateMutexA
CreateDirectoryA
WriteFile
ReleaseMutex
GetLocalTime
lstrlenW
GetEnvironmentVariableA
MoveFileA
GetTempFileNameA
SetFileAttributesA
MoveFileExA
EnterCriticalSection
SetFilePointer
lstrcatA
GetShortPathNameA
LocalFree
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
ReadFile
LeaveCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
DisableThreadLibraryCalls
GetWindowsDirectoryA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetModuleFileNameA
GetProcAddress
LCMapStringA
LCMapStringW
IsBadWritePtr
CompareStringW
VirtualAlloc
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
FlushFileBuffers
CompareStringA
GetFileSize
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
GetTimeZoneInformation
RtlUnwind
RaiseException
GetCommandLineA
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetModuleHandleA
GetDC
ReleaseDC
ShowWindow
SetWindowPos
SetActiveWindow
SetForegroundWindow
SetFocus
BringWindowToTop
wsprintfA
GetDeviceCaps
GetNamedSecurityInfoA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
SetNamedSecurityInfoA
GetUserNameA
RegCloseKey
SetEntriesInAclA
ShellExecuteExA
CoCreateInstance
LoadRegTypeLi
SysStringLen
SysAllocStringLen
SysAllocString
VariantChangeType
VariantClear
SysFreeString
ord23
ord15
ord21
ord16
ord57
ord32
ord58
ord30
ord31
UuidCreate
UuidToStringA
Netbios
DllCanUnloadNow
DllGetClassObject
DllGetData2
DllRegisterServer
GreatBall
GreatBall1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ