7888d25778925d4f838858a7a3beaaa0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7888d25778925d4f838858a7a3beaaa0_NEIKI
Size

35KB
MD5

7888d25778925d4f838858a7a3beaaa0
SHA1

f6c0823e4ebcd4b73e9e6e5ee657a5ce2aa8c922
SHA256

603dde72eddf5b7da4d396a662682ea4f4de0d1fffbbb184d86ea5dd37d73f35
SHA512

000270f529309eb77778a84d853276f873021c7a2ed93e83789bcfcefbd4f597ec4be3f0c1c4a41c699e6a24757653c08bce15260d1774461a1276a94d004827
SSDEEP

768:SeAaL04BLz72FTgIYYU08dEFr3bRktD/2JmS:9AaL0407YAdFrLYKES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7888d25778925d4f838858a7a3beaaa0_NEIKI

Files

7888d25778925d4f838858a7a3beaaa0_NEIKI
.exe windows:4 windows x86 arch:x86

9e07083c3e91fb05e14984556f52f6d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
GetFileSize
lstrcpynW
lstrcpyW
ReadFile
CreateFileW
CloseHandle
HeapFree

comctl32

ord17

wintrust

WinVerifyTrust

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ