64450fb5185cef923bc9612530c16770_NEIKI | Triage

Sharing

General

Target

64450fb5185cef923bc9612530c16770_NEIKI
Size

119KB
MD5

64450fb5185cef923bc9612530c16770
SHA1

85ea0e6bcea716c4374b3ec234fab0d780c084ac
SHA256

d505c95ce57b50225c610a79e0e2ebb6cea708e086ed22c75ef3deb23dee6a9f
SHA512

0d72ce01ba4595171538d9edecc6be83c11e83fe578f121b47743f73c886722d83fa8796951782a822673847209cb51e74c2ca8efc8be471764fefc68f62b635
SSDEEP

3072:8X/mjJPTrAyoCCbVgttCsk82DPHDU4CM1RwB:8X/mjJmbVgt8sk8cU4z1KB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64450fb5185cef923bc9612530c16770_NEIKI

Files

64450fb5185cef923bc9612530c16770_NEIKI
.exe windows:4 windows x86 arch:x86

8b18cbdb46c53bb9aa95c489c2f4f6ee

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasesLengthA
GetExitCodeProcess
MapUserPhysicalPagesScatter
ResolveLocaleName
lstrcmpi
AcquireSRWLockShared
LCMapStringA
FoldStringW
FindVolumeClose
GetConsoleKeyboardLayoutNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE