a59b865777ae3df61fde900e6f12dae0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a59b865777ae3df61fde900e6f12dae0_NEIKI
Size

25KB
MD5

a59b865777ae3df61fde900e6f12dae0
SHA1

136f5e6d046c86dec993ebfb91bef52f1b276b24
SHA256

03b063c9a6c0eb99051ab93501159d5303b7cebef0d9b49ad12f47fe2745d418
SHA512

0fe89dd4ae71959effac059f9a4f604bbd2323b7a7f7e7b73a8f3146d1c28a37e7957d2a2f85845128bc7044f5d045b06fb736fc6640d468a0a2c2ebce857078
SSDEEP

384:ErzP3QWBY/GObzTVVS1/wtVLiIgSkODgRfrBgH2f8w8wkQFE1+8:ErzfBsGObzWN+TgRO+OWf8wpH8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a59b865777ae3df61fde900e6f12dae0_NEIKI

Files

a59b865777ae3df61fde900e6f12dae0_NEIKI
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE