663f82e8aa4adc1c013720d18b73c660_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

663f82e8aa4adc1c013720d18b73c660_NEIKI
Size

72KB
MD5

663f82e8aa4adc1c013720d18b73c660
SHA1

76e250c393215232b9de08229a51d37118417a79
SHA256

9f166d55a20469d5c60b3da4cd1ca7c47e738513ccd3f50f5b3074fdb2bdb879
SHA512

a35b133a87ebb454afce8f43b99e523d47c19951a64d2bc760f3122d1abbd09a24a9f606ddc5c233dc2713d90a6c32f4aa935ae2675778f8cbea7ec1fac99ee9
SSDEEP

1536:xg/FXW0vzJ05S5f808q3XOQWqWk00b4js1THdboa5hhe:2Q0vz6OmqSqD0A4jC9bzhQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
663f82e8aa4adc1c013720d18b73c660_NEIKI

Files

663f82e8aa4adc1c013720d18b73c660_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE