51136a9105f21c24fd2eaa75ee671f00_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51136a9105f21c24fd2eaa75ee671f00_NEIKI
Size

71KB
MD5

51136a9105f21c24fd2eaa75ee671f00
SHA1

4e2dcb168135dbb622975e6703f6afcc8847831c
SHA256

e7df5dad11376114211264d04829f6bd2059c64300303905039a4a76502925a4
SHA512

4b345d4e05231f3fa64df4213ce3340b9f19947ae5c45893c1b2913823be126925f61db524ce345ed5d373ab0a33d4d0a0cbe4c716b03f01578b2ceb991bbe00
SSDEEP

1536:vo/QL2/Ou8kMXdnYdSu5dt5Njs0BflGBjVgQbdhZM27i:vo/QL2/Xgdw5Njs0BflmJgQJE27i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51136a9105f21c24fd2eaa75ee671f00_NEIKI

Files

51136a9105f21c24fd2eaa75ee671f00_NEIKI
.exe windows:4 windows x86 arch:x86

10116ae98a8fb67f624bfbd756f44c66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetGeoInfoEx
ReadConsoleOutputA
TryEnterCriticalSection
GetConsoleAliasW
WritePrivateProfileStringA
_lwrite
GetCurrentProcessId
GetTimeFormatW
GetPackageId
BeginUpdateResourceW
GetNamedPipeHandleStateA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE