710fd8090b5a0857e2a37fdb9562fe00_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

710fd8090b5a0857e2a37fdb9562fe00_NEIKI
Size

119KB
MD5

710fd8090b5a0857e2a37fdb9562fe00
SHA1

b4627b2a782adaf487897fc258f646f2332454fa
SHA256

55ce75b3e2da6e003c0c43d0d43ec877b308c4ccaa68f0284b222c4ce712366e
SHA512

6f67d0d19b1e75b386a35f1074a0208d21292c26b76da78a6c562314fb2c8bdac9a069ed8f4479b80f16b8c066cc7b4a3d40dc5bd5cd25da42b48efb1a74d947
SSDEEP

3072:pK49+01NeFyCDV+hiNW6S/GT+HxKpehmM1:c4gOeFnchiNS/i+Hxf1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
710fd8090b5a0857e2a37fdb9562fe00_NEIKI

Files

710fd8090b5a0857e2a37fdb9562fe00_NEIKI
.exe windows:4 windows x86 arch:x86

22a7f6477e6e32c6f01ea30ddfb17567

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameW
GetConsoleDisplayMode
GetCurrentActCtxWorker
TryEnterCriticalSection
InitOnceInitialize
BaseFormatTimeOut
WerpNotifyUseStringResourceWorker
K32GetWsChangesEx
InitializeSynchronizationBarrier

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE