79e5425bd5e5a0ecb36bf825fc9a58c0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

79e5425bd5e5a0ecb36bf825fc9a58c0_NEIKI
Size

324KB
MD5

79e5425bd5e5a0ecb36bf825fc9a58c0
SHA1

81770e738e5221860f788676d4dae4336a2af3a6
SHA256

eaaaf5fa70f656991a17403b5b2346050abd9677a233e4a5577ee1cf41548cab
SHA512

02e019c7e3954a1b78976b98ee36e9494ad240eb4c62c7dc16bcd6223d0ef1b365111cdd7fc475a939037115050f95c42fef7fb2fa26e7ff42192e529ddf9838
SSDEEP

6144:Zt58sOQf6lghcnBBLf9tQiepbGjhboOBnSusSTUvXBirw/AwFF4P:ZtisOQf6lXbpt/kbGjhV5AvXxHK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
79e5425bd5e5a0ecb36bf825fc9a58c0_NEIKI

Files

79e5425bd5e5a0ecb36bf825fc9a58c0_NEIKI
.exe windows:5 windows x86 arch:x86

06ef33a1c45fdabdfa5b6e2e08bce5aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadCursorW

advapi32

RegQueryValueExW

shell32

ShellExecuteA

ws2_32

htonl

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 289KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE