9ae825f6ae9e2f99241e4957a4b2fee0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ae825f6ae9e2f99241e4957a4b2fee0_NEIKI
Size

155KB
MD5

9ae825f6ae9e2f99241e4957a4b2fee0
SHA1

7b8542ee744a873e71fe6c9169867edd20fd83c1
SHA256

4b8711b7e39dee2ee83dcba71611a7e39dfffbb78c0034a474a94607207d9301
SHA512

5828cfbf0e555fc23e236db209f2ba92f574bda9182449fe900d662eadca61580ea6512f9453e73e099fd07ce977a011b92dd225c3fc04885139681154d2c45c
SSDEEP

3072:Faep50dg2N2p2eD2m188go7v7vwIqVvPZmOoU17CjFUxHcsm9Q1da1bQ7+:Ftp50dg2N2/ZXgs7vwRxbHcsbGUC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9ae825f6ae9e2f99241e4957a4b2fee0_NEIKI

Files

9ae825f6ae9e2f99241e4957a4b2fee0_NEIKI
.exe windows:1 windows x86 arch:x86

7e784b8faf52339240d2ce4d73c62df6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
SetLastError
GetModuleHandleW
lstrcpyW
lstrcmpW
CloseHandle
WriteFile
lstrcmpiW
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetLastError
GetCommandLineW
lstrlenW
CreateFileW
GetVersionExW

user32

RegisterClassA
CallNextHookEx
SetFocus
GetFocus
GetWindowRect
SetWindowPos

advapi32

RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey

gdi32

ExtTextOutW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 192B - Virtual size: 192B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ