5db0fc21212350ffacf9f6c086aa24d0_NEIKI | Triage

Sharing

General

Target

5db0fc21212350ffacf9f6c086aa24d0_NEIKI
Size

54KB
MD5

5db0fc21212350ffacf9f6c086aa24d0
SHA1

bd6ada4eebc41f45d34d8a700d46bef6d95e548f
SHA256

bdc0ad34ee166954cfc5861bc65c46da169058e8f7f6e3558bb542917e508714
SHA512

f905b2dfc528d2aa7ae01a8a5e7efd915826428c4c49bde1ba94e05b4cd3f0e1f1c3b90db0561d90800d7adcee6aaacfba985807862dfda03cf80dff37fd6bd1
SSDEEP

1536:7EdxnfRpelLH5ZA7U0NWVojddB0aId04xISrwAEt:7E7fRYZ5ZA7UFWdd0gSY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5db0fc21212350ffacf9f6c086aa24d0_NEIKI

Files

5db0fc21212350ffacf9f6c086aa24d0_NEIKI
.exe windows:1 windows x86 arch:x86

f4411006d5db7a79b39953328ee7af2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

MessageBoxA

kernel32

ExitProcess
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE