423762b6834549cf99513beb68576d50_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

423762b6834549cf99513beb68576d50_NEIKI
Size

72KB
MD5

423762b6834549cf99513beb68576d50
SHA1

3388861b147517cb0cc871f129d60a38d36b8368
SHA256

97fafe3f924f37956f4807df744f15d3eedcfc827913a6292f779796aa7d6b45
SHA512

fe3f6275a5f904438691e9ec29cd52211d0d092f723c21ae129f016bf0ca7895378442f2eb93e73cfd34e204ddbd9345a2a9a9f9f43d84e56e737b097a6b75b0
SSDEEP

1536:x9ouU985sNstFt5n59tXwvDz7w2Hqn7f3:XiG3tx59EfdHiz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
423762b6834549cf99513beb68576d50_NEIKI

Files

423762b6834549cf99513beb68576d50_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE