683e8f63aece57a10c8275b86a58b2e0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

683e8f63aece57a10c8275b86a58b2e0_NEIKI
Size

119KB
MD5

683e8f63aece57a10c8275b86a58b2e0
SHA1

7dc246ae6d8cba0c505d8807b5312a8d4e6943b2
SHA256

3f4fbb0789b827fe72753849a5d0b092ba0fa85be86de2e0870e83432d133f09
SHA512

5efebdb7e4d741beb7920827bcfde2974264c6517953e96c27706e7138fd088cc300ea519f700253fd8ec3e9317c80ff282dcc61410a9c73f5858a1def229b62
SSDEEP

3072:xgJ/h4DjPidKkGZWHNOL++cSr4KyaWrVDz0CHrlnOm9NZ:k/hUKIkRNOLLrxQVD/HrlzNZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
683e8f63aece57a10c8275b86a58b2e0_NEIKI

Files

683e8f63aece57a10c8275b86a58b2e0_NEIKI
.exe windows:4 windows x86 arch:x86

253092a8ea2648dadb87edeb888e2bb9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDateFormatEx
GlobalGetAtomNameA
PssWalkMarkerCreate
FindFirstFileA
SetConsoleCtrlHandler
WerRegisterExcludedMemoryBlock
RegLoadMUIStringW
WideCharToMultiByte
GetPackagePath
BaseDumpAppcompatCacheWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE