ea9a3c9a49d1eeb1c0839635d226c2f0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea9a3c9a49d1eeb1c0839635d226c2f0_NEIKI
Size

30KB
MD5

ea9a3c9a49d1eeb1c0839635d226c2f0
SHA1

7d9afab41a249c9c18bfc0c376a7b95cb4ab4efa
SHA256

2c3092101f2bcee60c52b3c17d5cc0ac9af4e08394475ea4737608bfe372a63a
SHA512

5c436d6def195f601c8d8ef61570d6f5c63fd4b6935ecf11b580edda4514de8c03e4ca4b38d1b50a84589be76c2f749181b9e8f25a971747b14031c7519bfc7a
SSDEEP

384:CV6wM2h3ln/3m0p/Qhlg8dgQBY8hrBpj6480BpLe2MJ0W8x0:Q6K7fJKFiQTrLjdTLTW8x0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea9a3c9a49d1eeb1c0839635d226c2f0_NEIKI

Files

ea9a3c9a49d1eeb1c0839635d226c2f0_NEIKI
.exe windows:4 windows x86 arch:x86

93ef196156d6da1d4462ba7d424ca7b0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClientRect
GetMessageA
EndPaint
ShowWindow
UpdateWindow
DrawTextA
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
MessageBoxA
DefWindowProcA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
PostQuitMessage
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentProcessId
GetCurrentProcess
GetSystemTimeAsFileTime
CreateFileA

gdi32

CreateFontIndirectA
DeleteObject
CreateCompatibleDC
CreateSolidBrush
CreatePen

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bss
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ