f62f9b787a150e39c1eaa7b5c869b6b0_NEIKI

Sharing

Copy URL Twitter E-mail

General

Target

f62f9b787a150e39c1eaa7b5c869b6b0_NEIKI
Size

38KB
MD5

f62f9b787a150e39c1eaa7b5c869b6b0
SHA1

a605bd05de609254e0732baa8d52c632d50c1606
SHA256

ee61ae992162c118466bde74e9b8b8aacbf175d42e07546b1fe669b0077cca06
SHA512

716fbb401abac9cf182b0b66633d010c40f23af574dd6e378722c90079c66ebe1a9474d37d446d4d2511cf71fbdb84c0413af3e16205ec83f0b92b61ce665493
SSDEEP

384:EExijblJLhqWTphKwG3UJ6TLarCzstfisYpEOeDhtepCYauh:EnlegUGqLHz6Yp8eva

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f62f9b787a150e39c1eaa7b5c869b6b0_NEIKI

Files

f62f9b787a150e39c1eaa7b5c869b6b0_NEIKI
.exe windows:6 windows x86 arch:x86

b15ab27743d4bec65269dd184b9e103d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\workspace\AppODBCTest\Debug\test1002.pdb

Imports

user32

GetDesktopWindow
MessageBoxW

odbc32

ord41
ord75
ord39
ord31
ord13
ord11
ord9
ord4
ord24

msvcr110d

__setusermatherr
_initterm_e
_initterm
__initenv
_fmode
_configthreadlocale
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_cexit
_unlock
_calloc_dbg
__dllonexit
_onexit
_invoke_watson
_controlfp_s
_except_handler4_common
wcscpy_s
_wmakepath_s
_wsplitpath_s
_exit
exit
_CrtSetCheckCount
_CrtDbgReportW
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
_CRT_RTC_INITW
_vsnwprintf_s
printf
_commode
_lock

kernel32

GetModuleHandleW
FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
DecodePointer
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
MultiByteToWideChar
LoadLibraryW
lstrlenA
GetLastError
RaiseException
IsDebuggerPresent
EncodePointer
LoadLibraryExW
GetSystemDirectoryW
GetModuleFileNameW
GetProcAddress
IsProcessorFeaturePresent
WideCharToMultiByte

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b15ab27743d4bec65269dd184b9e103d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

odbc32

msvcr110d

kernel32

Sections

.textbss Size: - Virtual size: 64KB

.text Size: 20KB - Virtual size: 19KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.textbss
Size: - Virtual size: 64KB

.text
Size: 20KB - Virtual size: 19KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB