2f243f4d8e42355b833e8972bb6ab940_NEIKI | Triage

Sharing

General

Target

2f243f4d8e42355b833e8972bb6ab940_NEIKI
Size

6.7MB
MD5

2f243f4d8e42355b833e8972bb6ab940
SHA1

8f10dd20130c082a510756ab90ea3790e6ae7353
SHA256

071dc4294b6bcecebb99efc29e5f94b1154c62045ea181e488af3eed850e6a14
SHA512

01c4bb92c0479d86b84ace22f05eac4c55b41fa32851075bdeca2e146d1f56acb60389ba2661b4a3731f0c971d0cb2a1d0bf6d5325cf9ec73299829fc7c853e7
SSDEEP

98304:bsNffi/cAG0rLTWUw8RCXKujioklHme3KL4bU5bWGtXEMWyK1z18qNPkh:wNf3gTI8CBBklxbOamay418skh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f243f4d8e42355b833e8972bb6ab940_NEIKI

Files

2f243f4d8e42355b833e8972bb6ab940_NEIKI
.dll windows:4 windows x86 arch:x86

6131400a2864181171ce47575db19ff7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetMailslotInfo
GetDiskFreeSpaceExW
EnumResourceTypesA
GetLogicalDriveStringsA

msi

ord50
ord15
ord31
ord7
ord54

Exports

Exports

LopperObsessionsMirages
0X1LsPwDkHb5cwQM
NurseriesMultimillionRoe
OdiousPrawnPressurise
PermittingRelativesPermanent

Sections

.text
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 953KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ