1c13f3f41bd178a9bbdd5c9ab15d5770_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c13f3f41bd178a9bbdd5c9ab15d5770_NEIKI
Size

72KB
MD5

1c13f3f41bd178a9bbdd5c9ab15d5770
SHA1

364be4feac7c9eb64c7449890270de2667b2acd9
SHA256

d3ae195b6efac244c4c43e50b17d240f347e1cc5d873b587b9595e396f55badc
SHA512

7055c390ca7d04a17594f8b4926e7278cab2a6e798b7b35d635255609eac8e8784d2a9ccadab08d4d3a171d107d6478eb5bf7d0d385a5b0b6784611236404839
SSDEEP

1536:xWLw62p7KTxU0IIBhVu2d7mN9msbqt36etdDy:lgTJBq2d7e9ah5y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c13f3f41bd178a9bbdd5c9ab15d5770_NEIKI

Files

1c13f3f41bd178a9bbdd5c9ab15d5770_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE