83d0019fc560127a20f76e0afae667c0_NEIKI | Triage

Sharing

General

Target

83d0019fc560127a20f76e0afae667c0_NEIKI
Size

26KB
MD5

83d0019fc560127a20f76e0afae667c0
SHA1

7f0c4931a7dce590b1b886e0a6271558910d70aa
SHA256

47ce9637d4a2ade86137544808d3bd96d27254078b9bb5707d5a223d5c29eb3f
SHA512

f585d5bdca12bf2ec7c4e1f07f56d1ac0f1ab317a228d980bc062aec5cec174b30cb9d842c990115927c2bc0e08a8a2b858c23832902ef89556739f41ec49fa8
SSDEEP

384:6xaP8tE7bJDSxx5cLes01hUnOvKaP9NbBFiq8sSr7xkZl6YQ93IzYy79k:+aP8yDSxLD2nOyaPbIWOC8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83d0019fc560127a20f76e0afae667c0_NEIKI

Files

83d0019fc560127a20f76e0afae667c0_NEIKI
.exe windows:5 windows x86 arch:x86

2a71d4f31a0049abe53363fda443e30e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipBitmapGetPixel
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipFree
GdipAlloc

kernel32

HeapFree
FindResourceA
LoadResource
SizeofResource
LockResource
GetProcessHeap
HeapAlloc
CreateFileW
WriteFile
CloseHandle
lstrcatW
OutputDebugStringW
FreeLibrary
GetCurrentProcess
GetProcAddress
LoadLibraryW
LoadLibraryA

user32

UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DefWindowProcW
InvalidateRect
PostQuitMessage
SendMessageW
GetMessageW
wvsprintfW
EndPaint
FillRect
GetClientRect
BeginPaint
DispatchMessageW

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ