974f62201f30edd478441f93fdbf0820_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

974f62201f30edd478441f93fdbf0820_NEIKI
Size

23KB
MD5

974f62201f30edd478441f93fdbf0820
SHA1

47a95756074b8c98ee1cd06163ddaa2ac250ae7c
SHA256

ba492300d12962ca72a7883ebe746d86801f39cf487619640d93d6839fef0e45
SHA512

20187adc6fa2f52bf5ac1e25f5b176588d87f4707f5317f7a6892aeed37fc6e07654190ebede7d6ac5099426c3b172776ed2615999ec1ad37f87bcb2737cfa6d
SSDEEP

384:O/HTfut04H5wakydVf/4xQ8uFvb9hCHhGBNsja:O/zcJ5Pf/r8urhCBc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
974f62201f30edd478441f93fdbf0820_NEIKI

Files

974f62201f30edd478441f93fdbf0820_NEIKI
.exe windows:4 windows x86 arch:x86

1e84ffa21ab885469d86810171c6502a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvidctl

GetProxyDllInfo

ole32

StgOpenStorage

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess

advapi32

CredFree

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ