6aa5059d15b68911bc713a42a1e21920_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6aa5059d15b68911bc713a42a1e21920_NEIKI
Size

188KB
MD5

6aa5059d15b68911bc713a42a1e21920
SHA1

0088338432466ba7501cf065e9a3cc4bd04f8f60
SHA256

d145111b529ca0805e1df940f697742832de9906947d4eb126c1e7366df686fe
SHA512

dee9813c9709cc9eccd64d99c3b0b6604380652c691b6832d9e972e1123d3b64ecde732f0a7e1c859c219732ff2f3de0afc2af4308bd968fb7601091cb7b59b2
SSDEEP

3072:lf1AO52h0MAu1QzzZKEtZL49PsApBmz/BHR9iT+8h2iFI62mustN7C:lflhMAlzzZKEtZL4h/Ox9iT+IHI6fuN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6aa5059d15b68911bc713a42a1e21920_NEIKI

Files

6aa5059d15b68911bc713a42a1e21920_NEIKI
.exe windows:1 windows x86 arch:x86

ce02fc97755de604b744f484091225bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
LeaveCriticalSection
SetLastError
GetModuleHandleA
CloseHandle
GetCurrentThreadId
GetCurrentProcess
UnhandledExceptionFilter
GetStartupInfoA
GetLastError
GetCommandLineA
lstrlenA
GetVersionExA
GetModuleFileNameA
LCMapStringA
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection

crtdll

__GetMainArgs
exit
raise
signal

advapi32

RegOpenKeyExA
RegQueryValueExA

ulib

?Initialize@LONG_ARGUMENT@@QAEEPAD@Z
??0DSTRING@@QAE@XZ

ntdll

RtlFreeHeap
RtlAllocateHeap

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ