8c71c445b07b95cfff9fc1b927b4d750_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c71c445b07b95cfff9fc1b927b4d750_NEIKI
Size

119KB
MD5

8c71c445b07b95cfff9fc1b927b4d750
SHA1

c1fe56c6290bd4fd6f01717c22f04277849015fa
SHA256

a1610af41f38e52a84c24798d91d00b096536faaad2c1792e69ec3858b26b487
SHA512

c414685fc178c7b2e59218e49f04937d548aa7632a45c54590e8e77d4c514353cd0b1d56606a747902b519d983827a947e36ca53a7fec8de2344fb5731e490c6
SSDEEP

3072:XnXjvFe/LG1A+etQ6EqPQOPxQdiPEdVArw4J/hb77SS/akwaJkbYz:3zvMzGg/PY/dVsPfSSisKUz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c71c445b07b95cfff9fc1b927b4d750_NEIKI

Files

8c71c445b07b95cfff9fc1b927b4d750_NEIKI
.exe windows:4 windows x86 arch:x86

4cff3def1a679955c2f17cecbe1f5fc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessPreferredUILanguages
GetConsoleAliasExesA
BuildCommDCBA
_lclose
BuildCommDCBA
timeGetDevCaps
GetCurrentDirectoryA
SetFileAttributesTransactedW
GetSystemDefaultLCID
GetCurrentConsoleFont

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE