36056d568737c3e9400c051d488d9e20_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36056d568737c3e9400c051d488d9e20_NEIKI
Size

72KB
MD5

36056d568737c3e9400c051d488d9e20
SHA1

53aff3d76e73c67986454d2b43d4f5c131ecfaf7
SHA256

cd489ca0976fe5be0d1e1046629c45a4d90af105804120cc9a02ff56c9437508
SHA512

9bc62a8515459b268502ed4d9c43bb9f51a8de51cd4b1885fbe00634f88746dd0ee614dc877551c3bc9e1d5dcd86981dc92dcc8568a954eff36ea034f021a6da
SSDEEP

1536:xPhWNc6tJBsHnsim25qCp7nwHyxTQrQRLITXZc:xKR4sf25qCp7wHyxEc+c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36056d568737c3e9400c051d488d9e20_NEIKI

Files

36056d568737c3e9400c051d488d9e20_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE