24482aca0162ce874b7b461fc97426f0_NEIKI | Triage

Sharing

General

Target

24482aca0162ce874b7b461fc97426f0_NEIKI
Size

234KB
MD5

24482aca0162ce874b7b461fc97426f0
SHA1

0a8fc6c85641f8f48a6d420aa485221a4601f4c7
SHA256

d43934f4f9e0f5ecd5dc9064e0f2c56467e2daab47625a8f1b7eda524eeec009
SHA512

6126bdf504901b51b21272b445d12183b0b77be06274964e3a3fc547ee032c5d1f05805f47b4010224f575b9b5be228fd97efce1bbd57d12ca44127a24e7c5bc
SSDEEP

6144:VXM7EVFd3EbWJ8QwnzrxFm+4AN0AAETN7qXTdqft1M+vOpky:VXM4Vvicw4i0iYEl1M+vOp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24482aca0162ce874b7b461fc97426f0_NEIKI

Files

24482aca0162ce874b7b461fc97426f0_NEIKI
.exe windows:5 windows x86 arch:x86

3c6e5793e514214727b5614fbe758755

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE