Static task
static1
Behavioral task
behavioral1
Sample
f559732c2a53b921d1ecf1fbe4aa68c0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f559732c2a53b921d1ecf1fbe4aa68c0_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
f559732c2a53b921d1ecf1fbe4aa68c0_NEIKI
-
Size
224KB
-
MD5
f559732c2a53b921d1ecf1fbe4aa68c0
-
SHA1
c802c4bbc0188cb1cd590f2a4b5f13028ff756da
-
SHA256
c2da65bf516fecac607e975beecb7c7870910ebaa2f689a88811c10428c133dd
-
SHA512
b98645070d8e354466981c5abd4448ecf4395c5ac91c8585f69a8808dce0031735d22305ebdfb63d4cbfc8d17e9582b57c7f569837ff0741c37b5b2192cbb684
-
SSDEEP
3072:jYDzDKJp8ekmHt/fE7nG1VwPj+CBEoRsQHlB3rttUWgTQcnqp:NTE7nGT8+CBEqzHnoW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f559732c2a53b921d1ecf1fbe4aa68c0_NEIKI
Files
-
f559732c2a53b921d1ecf1fbe4aa68c0_NEIKI.exe windows:4 windows x86 arch:x86
181eda6fa8547cc0d9c6bfb33d4b6c4f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalSize
WriteFile
CreateFileA
CloseHandle
CreateMutexA
GetModuleFileNameA
GetCurrentDirectoryA
GetVersionExA
ReleaseMutex
SystemTimeToFileTime
GetSystemTime
GetCurrentProcess
GetFileSize
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
InitializeCriticalSection
LoadLibraryA
GetFileType
SetHandleCount
SetFilePointer
ReadFile
LCMapStringW
LCMapStringA
HeapSize
GetStdHandle
HeapCreate
HeapDestroy
VirtualFree
DeleteCriticalSection
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
lstrcpyA
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
GlobalUnlock
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GlobalFree
GlobalAlloc
GlobalLock
Sleep
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExA
GetLastError
GetProcAddress
GetEnvironmentStringsW
HeapAlloc
HeapFree
RaiseException
HeapReAlloc
VirtualAlloc
GetModuleHandleA
RtlUnwind
ExitProcess
GetCommandLineA
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadLocale
user32
MessageBoxA
wsprintfA
SetDlgItemTextA
SendMessageA
CreateDialogParamA
EnableWindow
CallWindowProcA
ExitWindowsEx
GetClientRect
ShowScrollBar
GetParent
GetWindowTextLengthA
GetWindowTextA
InvalidateRect
GetSysColor
SetWindowTextA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
BeginPaint
EndPaint
GetMenu
SetWindowLongA
GetDC
ReleaseDC
MoveWindow
SetFocus
DestroyWindow
PostQuitMessage
DefWindowProcA
EnableMenuItem
IsClipboardFormatAvailable
CheckMenuItem
DrawMenuBar
GetSystemMetrics
CreateWindowExA
DialogBoxParamA
ShowWindow
UpdateWindow
EndDialog
GetDlgItem
gdi32
StartDocA
StartPage
EndPage
DeleteDC
SetTextColor
SetBkColor
TextOutA
CreateFontA
SelectObject
GetTextMetricsA
DeleteObject
EndDoc
comdlg32
GetSaveFileNameA
PrintDlgA
advapi32
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
ole32
CoUninitialize
CoCreateInstance
CoInitialize
winmm
timeGetTime
atkmethod
_One_Method@12
_None_Method@8
_Support_ATK@0
Sections
.text Size: 132KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ