6ff44153fdaea16cbcf305780ed27a00_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ff44153fdaea16cbcf305780ed27a00_NEIKI
Size

201KB
MD5

6ff44153fdaea16cbcf305780ed27a00
SHA1

0d1218efacf5b6dc9fa21b8235eb90d84c356392
SHA256

31a896244c9c78d47eea51bb5413f1700b87a288d8d554953e45bded6b0845f7
SHA512

3eec43e4545e63c7825a0103faab0b667ab709149aae3cda1d12440a9b1298ff6c0dad3098801b4e84d7f9cfca3faa3cf8060edcac79e7baf7066178dbd3fc98
SSDEEP

3072:uTCDYDg+vr87rnj3WCW2EW51HKKnyAyN4:IooZIFH5nu4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ff44153fdaea16cbcf305780ed27a00_NEIKI

Files

6ff44153fdaea16cbcf305780ed27a00_NEIKI
.exe windows:4 windows x86 arch:x86

7909826cb72884560635663c8951a127

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

advapi32

OpenProcessToken

user32

ExitWindowsEx

version

GetFileVersionInfoSizeA

ws2_32

WSAStartup

Sections

VHqxTUpa
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IaDsgWGk
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE