ad88559853808c798984316367a7ea10_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad88559853808c798984316367a7ea10_NEIKI
Size

142KB
MD5

ad88559853808c798984316367a7ea10
SHA1

0b1905e7d3ce8e23f7d9f2eb2dca06dc263af5ad
SHA256

7f0f79f73393d0eafe4c6fdeb21237653b3ab5f302b835b3c5dd78f46618d426
SHA512

439f0a061d0977bf96c0101d59a7b3e0f1e10aac76c6a2b0b26488fb03bec204eb8fe557ff5ab458a12b4073c97473ef3a7e341a77f5acfd87f0b0b232e4879c
SSDEEP

3072:+sO6Vlp9jlCgptKgPz2x2AoUAOog+77KsEMBGAJ8hk:bOEj95CYPz2xPfAOwbZGAJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad88559853808c798984316367a7ea10_NEIKI

Files

ad88559853808c798984316367a7ea10_NEIKI
.exe windows:4 windows x86 arch:x86

7ca079a6f874aaeaeaa6ee076cfa0b94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
SendMessageA
PostQuitMessage
DefWindowProcA
CreateWindowExA
LoadCursorA
LoadIconA
RegisterClassExA
FindWindowA
IsIconic
ShowWindow
UpdateWindow
LoadStringA
GetMessageA
DispatchMessageA

kernel32

GetStartupInfoA
GetCommandLineA
HeapAlloc
ReadFile
ExitProcess
lstrcpynA
LoadLibraryA
GetTempPathA
SetLastError
GetProcessHeap
CreateFileW
GetTickCount
GetModuleHandleA

gdi32

SetBkColor
CreateSolidBrush
DeleteObject
SetTextAlign
TextOutW
GetBkColor
GetStockObject

comctl32

InitCommonControlsEx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ