58dad16d385270b0b59ab5fad215ce60_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58dad16d385270b0b59ab5fad215ce60_NEIKI
Size

73KB
MD5

58dad16d385270b0b59ab5fad215ce60
SHA1

0397685d1e6683772349090c1408f663aa2d5574
SHA256

f1d7bd9e44bde1ef04f004cc9eabb308f7db7b75364a3d954764f3c392a013c6
SHA512

1d95c1b0e3986e14968bbd45e445d339c5df65e4979652289f011dff864544d11fae0b236b05c91d5525906b7d1bb7888a2917a6812437302c8d0fd1e2bbfc09
SSDEEP

768:hZZ6Zyf9ei1kK4GJrydY8O8oM+9asPW+JXr7QILPcMLopRgVdfbII8CQ7QHt08FC:14K8Y1XVVkgVdrI7Q3FIskXJpD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58dad16d385270b0b59ab5fad215ce60_NEIKI

Files

58dad16d385270b0b59ab5fad215ce60_NEIKI
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE