c627dc0a87fd7049a3d32c472b06e490_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c627dc0a87fd7049a3d32c472b06e490_NEIKI
Size

24KB
MD5

c627dc0a87fd7049a3d32c472b06e490
SHA1

888c35d28338fb77a29986901e7031730c725668
SHA256

7ef11fee8412edd50798eae347b3623f128a306b12c01f0581850605ef245df4
SHA512

cb6423fd2a832bfd4156eacc4e5c319a5dade6f53bf52d9311154afb0b01f433039c4c7ea7a01d875f1d349fcfa86ec970f6cb56beaa8b78f2211afb0bfe64ac
SSDEEP

384:jIz4N1cLzO4lHsXnSDfIQxjqFIsBDZbUvQMaQZLl20/dbljsiduDpKm3:jIU0zlHsOfIz5hZ/QrsqBk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c627dc0a87fd7049a3d32c472b06e490_NEIKI

Files

c627dc0a87fd7049a3d32c472b06e490_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE