0fb6c9d140f81d65a156b56a09fbcea0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fb6c9d140f81d65a156b56a09fbcea0_NEIKI
Size

75KB
MD5

0fb6c9d140f81d65a156b56a09fbcea0
SHA1

6c68555b9d930665df694dbb9ea0deac195b51b9
SHA256

38886e07713650555123c934a6f2373bca0361528c166d4507013475ef21e080
SHA512

3ab86eebace0ecc4c192224c7127d887456c603800146194523523741f9e6a9ba9191f6e5a7ec6c018fff2f059de5359b50c0d027d75f302a4af2a6f65ca2911
SSDEEP

1536:MD7DL7tc4108tdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsrYNkWLnxtVlnGMpN:MD7DLhNHtdgI2MyzNORQtOflIwoHNV2C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb6c9d140f81d65a156b56a09fbcea0_NEIKI

Files

0fb6c9d140f81d65a156b56a09fbcea0_NEIKI
.exe windows:5 windows x86 arch:x86

5cdbf67e6579af610fcd31f176bbd81c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadCursorA
LoadIconA
SendMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
LoadBitmapA
FillRect
BeginPaint
DispatchMessageA
EndPaint
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
GetDC
GetWindowRect
KillTimer
SetWindowPos
TranslateMessage
SetTimer

kernel32

GetModuleHandleA
GetCommandLineA
GetLastError

gdi32

TextOutA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ