7138662333a95c2707cbfe0c1fd02990_NEIKI | Triage

Sharing

General

Target

7138662333a95c2707cbfe0c1fd02990_NEIKI
Size

119KB
MD5

7138662333a95c2707cbfe0c1fd02990
SHA1

dd8a1913b085506b654e6fbd3004300b555f30bc
SHA256

4fd50824bf74b438f885b0a97043f3d452f431cfed32c2bb8c6f5c084d018679
SHA512

acd3520a688bbdebe8c047644957bdb8143a53d73bf9529d440cec2ac4d79be9ee19af569efc2bd1812a0588fd0d37100f51367e90c085ec6aa4288fbc892709
SSDEEP

3072:A41w4DOCxpzoEt2CtmUyCVOP37RStvKe3cpC:3/7brt5FVCLRwncpC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7138662333a95c2707cbfe0c1fd02990_NEIKI

Files

7138662333a95c2707cbfe0c1fd02990_NEIKI
.exe windows:4 windows x86 arch:x86

6a350b48ae62e73927ffe797c25096a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFirmwareEnvironmentVariableExW
EnableThreadProfiling
LocalShrink
GetHandleInformation
CtrlRoutine
SetConsoleTextAttribute
PssWalkMarkerSetPosition
QueryDosDeviceA
Toolhelp32ReadProcessMemory
SetTimerQueueTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE