f9abe5b7d92eb36f8860ad87d6033c20_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9abe5b7d92eb36f8860ad87d6033c20_NEIKI
Size

25KB
MD5

f9abe5b7d92eb36f8860ad87d6033c20
SHA1

23ba33c8aab5eda9271ba542ca9b8124d469d789
SHA256

25b937cf95f5886128fd3a2f9c507acde9661b3d72ec854c95337d47a602bd69
SHA512

97a27344a7009fa3101d6873983994bd89f751fe3a601d3e60f8d23a088066f16a09a2c8926b98f5373d4fa0260b386c636e97abdb3624c792d4731978acc842
SSDEEP

768:KSxfuSGx2RDeutdgI2MyzNORQtOflIwoHNV2XBFV72B4lA7ZsiZ+CeOtz:Kyu8DeutdgI2MyzNORQtOflIwoHNV2Xg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9abe5b7d92eb36f8860ad87d6033c20_NEIKI

Files

f9abe5b7d92eb36f8860ad87d6033c20_NEIKI
.exe windows:5 windows x86 arch:x86

688ad82d47fe4314040aa0041646c921

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCloneImage
GdiplusStartup
GdipCreateFromHDC
GdipBitmapGetPixel
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipFree
GdipAlloc

kernel32

LoadLibraryA
HeapAlloc
lstrcatW
OutputDebugStringW
LoadLibraryW
GetCurrentProcess
FindResourceW
LoadResource
SizeofResource
LockResource
VirtualAlloc
VirtualFree
FreeLibrary
GetProcAddress
GetProcessHeap

user32

ReleaseDC
BeginPaint
GetDesktopWindow
EndPaint
wvsprintfW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ