26a8697fc7745e9a64ecee7b08ff4360_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26a8697fc7745e9a64ecee7b08ff4360_NEIKI
Size

72KB
MD5

26a8697fc7745e9a64ecee7b08ff4360
SHA1

b338630412734754a6258e410b0ec240448a280d
SHA256

a19b271c8dba29f385cb1569638adff57fa8dcbecd32757b4ba1676bff0d7732
SHA512

c676bf98e6b629178d9d1cc9255b33e18858a816eaf7f96e8ac98899a43af05949d10ad3e7e4c7bac0012641d9a67d442f8f2c4754a3dacbe51865bae0f75df4
SSDEEP

1536:xBoj3/OgHIerbSSuf9c/buo4iiugZb6hCPmXeu0XyxsdvDKcq:noDvHDrbTuf9abJiugV6hyu0XyxsdvDQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26a8697fc7745e9a64ecee7b08ff4360_NEIKI

Files

26a8697fc7745e9a64ecee7b08ff4360_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE