c726c9e3bb7d0b5140263209862d0f90_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c726c9e3bb7d0b5140263209862d0f90_NEIKI
Size

178KB
MD5

c726c9e3bb7d0b5140263209862d0f90
SHA1

24caf2108b981c311266ed6d6d069dbc43af365b
SHA256

3b332bc691a7dd8eba4b1dde678638c3b3334c099831f1358bd617fd7226b931
SHA512

e94ff893e50d72f3fd0ff0c471f5577220da70e01308bd23452b3e4453e55d56330f0d6702edbf4272246272a5f186e267910768dd71ca4704f0c07aa3648d34
SSDEEP

3072:2++TFnoWTTYBB1hHgN1AnqaQTqWZX54YQXwnHJMc:VuFyBDhHgPAnDTbDE7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c726c9e3bb7d0b5140263209862d0f90_NEIKI

Files

c726c9e3bb7d0b5140263209862d0f90_NEIKI
.exe windows:4 windows x86 arch:x86

1e981a857730d2d2d49c3cc3486f0953

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVolumeInformationA
GetSystemInfo
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 419KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ