a32d83d9eb5bf7786f94fc0c76383dd0_NEIKI | Triage

Sharing

General

Target

a32d83d9eb5bf7786f94fc0c76383dd0_NEIKI
Size

119KB
MD5

a32d83d9eb5bf7786f94fc0c76383dd0
SHA1

d7397433b7cdda085e5e04b9a3a2d543dc837944
SHA256

c8f67d020296ca87d01caaf8566d19f5c145d968294ebe060f165425e0639f4a
SHA512

082c3ac5ceb479ff58cc177d8321bc94de054d05f217bf815683f45f7922817f33ab366b64122a941c2be17050ea432339d979589ac0604d18d8df56f1aa032a
SSDEEP

3072:AGAJ6wvHTJhHqWKTUSHp/pIluSFiQd4X3r7ciEXRjS+:AGEHN1yT3kvFs77ciEXRjS+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a32d83d9eb5bf7786f94fc0c76383dd0_NEIKI

Files

a32d83d9eb5bf7786f94fc0c76383dd0_NEIKI
.exe windows:4 windows x86 arch:x86

8d958307a6c8a896028759e82e58a3c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadPackagedLibrary
PackageFamilyNameFromFullName
Heap32Next
CreateProcessAsUserA
ReadFile
SetFilePointerEx
VerifyVersionInfoA
GetThreadSelectorEntry
RaiseFailFastException
SetFileCompletionNotificationModes

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE