555eafd7b673fb102b53d32696e00390_NEIKI

Sharing

Copy URL Twitter E-mail

General

Target

555eafd7b673fb102b53d32696e00390_NEIKI
Size

83KB
MD5

555eafd7b673fb102b53d32696e00390
SHA1

437571e272bc0d41a4c51b9a67d1026d7ff7590d
SHA256

4f1170003cf67137d2df1189839a359cab8f704fa3206469751289b96a75a1d9
SHA512

61929db30c2d0dd0060d38f4086b5fd225dacce9c526c47e88a77733f093e1d9f24fffb68a1f66ab39beb92a90ab34e09ccd71762dd0c68a0493a8d0b6ffa72e
SSDEEP

1536:sl1sd4AAb+TzvO9esIXq9eFHUAf9HeIMTWmg9Ppki6EPAyVF:61C4A1TzvO9caMFHt1BWg9RkkBz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
555eafd7b673fb102b53d32696e00390_NEIKI

Files

555eafd7b673fb102b53d32696e00390_NEIKI
.dll windows:6 windows x64 arch:x64

19c4c09efcc3bdc793080be04499a1cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

UnrealServer-FSR2TemporalUpscalingD3D12.pdb

Imports

unrealserver-core

?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?DoSetup@FThreadSafeStaticStatBase@@IEBAPEBUTStatIdData@@PEBDPEB_W001_N2W4Type@EStatDataType@@22W4EMemoryCounterRegion@FWindowsPlatformMemory@@@Z
?Free@FMemory@@SAXPEAX@Z
?Malloc@FMemory@@SAPEAX_KI@Z
?CheckVerifyFailedImpl@FDebug@@SAXPEBD0HPEAXPEB_WZZ
?HandleAtomicsFailure@FWindowsPlatformAtomics@@KAXPEB_WZZ
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
??1FLogCategoryBase@@QEAA@XZ
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
?GIgnoreDebugger@@3_NA

unrealserver-rhi

?GDynamicRHI@@3PEAVFDynamicRHI@@EA
?Transition@FRHIComputeCommandList@@QEAAXV?$TArrayView@$$CBUFRHITransitionInfo@@H@@@Z

kernel32

RtlCaptureContext
GetCurrentThreadId
GetSystemTimeAsFileTime
QueryPerformanceCounter
DisableThreadLibraryCalls
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
GetLastError
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcessId

vcruntime140

__C_specific_handler
memset
__std_type_info_destroy_list
__current_exception
__current_exception_context
memcpy
_purecall

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm
_cexit
_crt_at_quick_exit
_crt_atexit
_initterm_e
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_execute_onexit_table

Exports

Exports

??1FFSR2TemporalUpscalingD3D12@@UEAA@XZ
?ForceUAVTransition@FFSR2TemporalUpscalingD3D12@@UEAAXAEAVFRHICommandListImmediate@@PEAVFRHITexture@@@Z
?GetNativeCommandBuffer@FFSR2TemporalUpscalingD3D12@@UEAAPEAXAEAVFRHICommandListImmediate@@@Z
?GetNativeTextureFormat@FFSR2TemporalUpscalingD3D12@@UEAAIPEAVFRHITexture@@@Z
?GetNativeTextureResource@FFSR2TemporalUpscalingD3D12@@UEAAPEAXPEAVFRHITexture@@@Z
?GetSupportedShaderModel@FFSR2TemporalUpscalingD3D12@@UEAA?AW4FSR2ShaderModel@@XZ
?IsFloat16Supported@FFSR2TemporalUpscalingD3D12@@UEAA_NXZ
InitializeModule

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uedbg
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19c4c09efcc3bdc793080be04499a1cb

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

unrealserver-core

unrealserver-rhi

kernel32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 10KB

.uedbg Size: 512B - Virtual size: 132B

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 1008B

.rsrc Size: 59KB - Virtual size: 59KB

.reloc Size: 512B - Virtual size: 160B

.text
Size: 11KB - Virtual size: 10KB

.uedbg
Size: 512B - Virtual size: 132B

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 1008B

.rsrc
Size: 59KB - Virtual size: 59KB

.reloc
Size: 512B - Virtual size: 160B