176657716e5dd4b38f05100fb4291120_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

176657716e5dd4b38f05100fb4291120_NEIKI
Size

27KB
MD5

176657716e5dd4b38f05100fb4291120
SHA1

6486faac00589b0cc27d3fed0b24be6adb01f1fc
SHA256

7c05291feb955b5c19579afd9cec107d7986bc2ed4d1cc312e40feee38bcc0b8
SHA512

cc478635c4e4bee4ba4a7c3f1caafe69063ed5f37eba810ab3c4f901a64f9e8dd1a91d261b4dceeb1abdc0900b65a1a778f4f47f9aadfd8ff23c52376cfe60be
SSDEEP

384:Q8hlBtIEFbpRPRUCeD8qXv3izeZR/ES5rBErZWfzBG7:Q8TBtIEBpg3iqZZEAruofzBa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
176657716e5dd4b38f05100fb4291120_NEIKI

Files

176657716e5dd4b38f05100fb4291120_NEIKI
.exe windows:5 windows x86 arch:x86

29b31b8fd204e9d1ad4ef065c4aae843

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
DefWindowProcA
PostQuitMessage
LoadIconA
RegisterClassA

msacm32

acmStreamOpen
acmFilterChooseA

kernel32

GetModuleHandleA
GetProcAddress
HeapCreate
HeapAlloc
GetACP
ExitProcess
FreeLibrary
GetTickCount
GetCPInfo
InterlockedDecrement
InterlockedIncrement
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
RaiseException
GetOEMCP
IsValidCodePage
Sleep
HeapSize
SetHandleCount
GetStdHandle
GetStartupInfoW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
InitializeCriticalSection

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ