2543ea840f105d7b8064ad8518abff90_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2543ea840f105d7b8064ad8518abff90_NEIKI
Size

73KB
MD5

2543ea840f105d7b8064ad8518abff90
SHA1

ff8d3720741c484dbb69e0a7582cda86c3d6b931
SHA256

cbf32081596ab13d22dc110781726b855f6c062a18881b945ce53bc09a3335b3
SHA512

c41f81f5774457b92a1b3c3bbca6b0e4a294dd5aee12ea6d838d2cd7d923b289d48690e1f5caf5b21ae797b1be22c278e71f2b464116c9f97f2be12838c7874f
SSDEEP

1536:fIjFcNagzwjGXZHLiMXvUe/nTE4mMKO44NwKR9Ho+Kx:AiISwaXZWUvUCBJ44y86

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2543ea840f105d7b8064ad8518abff90_NEIKI

Files

2543ea840f105d7b8064ad8518abff90_NEIKI
.exe windows:4 windows x86 arch:x86

d12c82e9655e9e26902fbbc1bf7ad332

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteProcThreadAttributeList
LocalUnlock
GetSystemCpuSetInformation
MoveFileA
GetFullPathNameW
GetTempPathW
WaitForThreadpoolWaitCallbacks
BuildCommDCBA
SetFileAttributesW
SetTimeZoneInformation

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 58KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE