f51e1f85348d7bd48829e84d5d7b5910_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f51e1f85348d7bd48829e84d5d7b5910_NEIKI
Size

2KB
MD5

f51e1f85348d7bd48829e84d5d7b5910
SHA1

1c666d0c55fccda9f35a0705a3136524728d1bba
SHA256

f7fdf8163a7e10e307ebbacccd93e56c55780da37602aee1b737f4533bcbae45
SHA512

00b27e18dc869cdf157daed49911681dc4d215b83843d3b29a68da79029a10ac2281bcb03aa2793fed2b0d078ebcd6e3336d8223ecc442083fa8ab024716bf2e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f51e1f85348d7bd48829e84d5d7b5910_NEIKI

Files

f51e1f85348d7bd48829e84d5d7b5910_NEIKI
.exe windows:1 windows x86 arch:x86

2ba629f434c3ca1b21fe81af6412d628

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
GetFileSize
GetModuleFileNameA
GetProcessHeap
HeapAlloc
HeapFree
ReadFile
RtlMoveMemory
SetEndOfFile
SetFilePointer
WriteFile

msvcrt

printf

user32

wsprintfA

Sections

.text
Size: 1024B - Virtual size: 795B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE