a4428fd5515b66835bbcd7ce54c02d80_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4428fd5515b66835bbcd7ce54c02d80_NEIKI
Size

61KB
MD5

a4428fd5515b66835bbcd7ce54c02d80
SHA1

6f4a1d494f3c22440343a8cf785d865e27fc3ee3
SHA256

b3e4e8fb3191674e734480b712dc379dc1bac3650363fb9ef880877d10c078c6
SHA512

8ac2c2eec30817581e7e0c4cd65f50ab35b31e62ca8529e796c56cb8640c0850d453add0fb579eafeee520deb07999b4abc2f9024290a8ace1663d7d1b2b3876
SSDEEP

768:sXuzKmOHnvgn+tOXRMFaIEj+POhVtMI3szUZSfHB:u0K/vgn+tB94vDzIUQHB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4428fd5515b66835bbcd7ce54c02d80_NEIKI

Files

a4428fd5515b66835bbcd7ce54c02d80_NEIKI
.exe windows:4 windows x86 arch:x86

4031e5d49f34c1eef26fe2b91cee7b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetCommandLineA
GetModuleHandleA
LoadResource
LockResource
SizeofResource
ExitProcess

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ