5e4bf20428fb054616a6406d006431d0_NEIKI | Triage

Sharing

General

Target

5e4bf20428fb054616a6406d006431d0_NEIKI
Size

32KB
MD5

5e4bf20428fb054616a6406d006431d0
SHA1

e27d1dfb4eb5ae0d6529987cc591d623b52ee226
SHA256

bfbc5cf7cef768c8d68d4d449dffe7c3614c4e580f22069b8bf9d9a04dd1bf0b
SHA512

616c5e90a71c0ca17030c9e57cf57fc3409b2b4aee8417164b9ad76ae05dc4283c569357cf6bb5d04ad49049f564c4dafd505ed7f2489bfb6c599168166a753d
SSDEEP

768:/qPJtHA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhf:/qnA6C1VqaqhtgVRNToV7TtRu8rM0wY/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e4bf20428fb054616a6406d006431d0_NEIKI

Files

5e4bf20428fb054616a6406d006431d0_NEIKI
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE