9fb7f7f8e3d0df2cb95d6b256e7ef000_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fb7f7f8e3d0df2cb95d6b256e7ef000_NEIKI
Size

119KB
MD5

9fb7f7f8e3d0df2cb95d6b256e7ef000
SHA1

e944a8bc0bf8c759d756c4dc3cbab7ced6a54cee
SHA256

687e75a05145c9ed64d645f6811c167b9a252c50fb6fe4afc3f8d9b46eb49ac0
SHA512

724af8c8208dad709571fc5f99ab5378cbbbf94af0bf8b42786e2118c0d26b5660f3d92c7fe35e20eeff3d96fe55e61288a4bbfac69c38b359b6abb44abe274a
SSDEEP

3072:0j8XD7+bXF+GcYQpm01eoVoAN9SNbxcHvijzdwfX0IgjW1:YjrFCYQpti82wMIOK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fb7f7f8e3d0df2cb95d6b256e7ef000_NEIKI

Files

9fb7f7f8e3d0df2cb95d6b256e7ef000_NEIKI
.exe windows:4 windows x86 arch:x86

fc359b585020aa47ad836d50f2a11bc1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitVDM
BasepSetFileEncryptionCompression
QueryDosDeviceA
CreateFile2
BackupRead
DisableThreadProfiling
GetOEMCP
VerSetConditionMask
CreateFileMappingNumaA
GenerateConsoleCtrlEvent
CopyFileTransactedW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE