36dfc70099c831eeb519e27308811830_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36dfc70099c831eeb519e27308811830_NEIKI
Size

39KB
MD5

36dfc70099c831eeb519e27308811830
SHA1

92b92e232467e61562b94b56ba98ca1dd407779a
SHA256

cff0f616cd1eb030d00a2994ebd69bab955b6a3d2fc89bb4193bb93e56f65d73
SHA512

7e9da57811e1dae174e98347b487fdd8be5673ab281166a342a4b67c493ca96d238105cfd712060ff56be5f6e3ccc8b2d88613b1eb684150ee570abd3836265e
SSDEEP

768:om05k4mjNmntC2ojHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8Oqt+D3D/jbTo:q+vjNmnVojXRrs9sINeZEtejlIkoLN1C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36dfc70099c831eeb519e27308811830_NEIKI

Files

36dfc70099c831eeb519e27308811830_NEIKI
.exe windows:1 windows x86 arch:x86

683692d4746aa100a2b6043db7fe5945

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
lstrcpyW
ReadFile
CreateFileW
HeapFree
CloseHandle
GetFileSize

comctl32

ord17

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ