6711019a5bdf41e54addac168cf54700_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6711019a5bdf41e54addac168cf54700_NEIKI
Size

21KB
MD5

6711019a5bdf41e54addac168cf54700
SHA1

69af9dcf3cf9f4f459f87553d95c1da4aa1e9c98
SHA256

f6791c17620976381fd1597ca7f6e56a87bcdfe8c3713db19095a9bd60d42751
SHA512

74a8af43f74ca1bd2660deebae879f7b7bdbe6c180d36119d8ea1b79d9d5f36f1da76e27b8fc487eb0113a4f9e607c4f4df01f474411e6b479ab2c7e49482c33
SSDEEP

384:jIz40ZrmE1eWnGrnQiFwyj22HJAYFmwTlsoj1B2Xnhv9jkM/0IxYOXbJug:jIUiZ1vInQieyDmhclFav9AA0qYabX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6711019a5bdf41e54addac168cf54700_NEIKI

Files

6711019a5bdf41e54addac168cf54700_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE