769cbba504d22ce4a733b7dd72a88320_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

769cbba504d22ce4a733b7dd72a88320_NEIKI
Size

119KB
MD5

769cbba504d22ce4a733b7dd72a88320
SHA1

4105df3a2ff617900ebde93b9f6b1377d5487b54
SHA256

435a803a091f2b497039709a4efae842ba5f6355ed14736b2920ed5cbf6d708b
SHA512

8eddca20be28d43811eb6f472f2db207ff36df1892160ea0e60b73a0a6f2d954c1525a064c933bdcf894978a18c4594c2a2c223076c8189b7a7f629dc8cfc467
SSDEEP

3072:dRIbrlkTkirli65WrTRf7SpB/1+hUMEeH4OMUsYNrERFD:YbriY8iowTJ7Y+hUdeHv5cD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
769cbba504d22ce4a733b7dd72a88320_NEIKI

Files

769cbba504d22ce4a733b7dd72a88320_NEIKI
.exe windows:4 windows x86 arch:x86

4822aab8a6eaff20741c06eb07167426

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyW
GetCommConfig
PulseEvent
DebugBreak
GlobalGetAtomNameA
GlobalLock
SetHandleCount
RegisterWowBaseHandlers
TerminateJobObject
GetEncryptedFileVersionExt
CancelThreadpoolIo
PssWalkSnapshot

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE