a4e61760c1018829aa36809514752180_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4e61760c1018829aa36809514752180_NEIKI
Size

1004KB
MD5

a4e61760c1018829aa36809514752180
SHA1

37d5951789650f1074b3ec0e8438322ef1bf2fc2
SHA256

510c09666e21cf216ecb40df189330617b85ca6b05279029d43c0c426d65131b
SHA512

2056a77f7de53b8e7f4bd4750255334814a9630e88c0c31c5a1f2a6991bc56cfcea92457d9ed1fcb90e8b572e06a64d504871677fdadeb9dacaf1d3a4f22da85
SSDEEP

24576:0kd76VZrT9hLCrQhXLjEqunKDNvjcajYWRH4WqSAOo3:0I70ZrTzCeXLAVnsNvjDYY9AOe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4e61760c1018829aa36809514752180_NEIKI

Files

a4e61760c1018829aa36809514752180_NEIKI
.exe windows:4 windows x86 arch:x86

89048a25c237a749f3f8b6d613e948ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
_lread
_lwrite
GetStdHandle
ReadFile
_lclose
_llseek
_lopen
SetConsoleMode
GetConsoleMode
CloseHandle
SetFileTime
CreateFileA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
GlobalAlloc
lstrcpyA
lstrlenA
lstrcatA
_lcreat
CreateDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrcmpiA
MoveFileA
GetModuleFileNameA
SetConsoleCtrlHandler
GlobalFree

user32

wsprintfA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE