ec18f30594ce1f8916a23467a771f4e0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec18f30594ce1f8916a23467a771f4e0_NEIKI
Size

70KB
MD5

ec18f30594ce1f8916a23467a771f4e0
SHA1

a1deada5cb47d3fdc378d791b4561a93edf937da
SHA256

4877a0c194a1b752307fda24a14c51ea0a6e60bbb4551f714c00405b1f27feeb
SHA512

5ac434bc493cebe4c4346bfeb501174e06493d0b8b7c1afaecce5596f3b8cedc65dad922d8d1097658aee388d81b5c3c79901cb90edde16acc61a2127141f702
SSDEEP

1536:xDYhx+IO3q0g2kF9OAKebWFP0c9snwPueKt4a5P4V2Ytm:Ix4bIEeCFPunwPLa5P4V22m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec18f30594ce1f8916a23467a771f4e0_NEIKI

Files

ec18f30594ce1f8916a23467a771f4e0_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE