692d875e313505a440a26cddc5ea4ee0_NEIKI

General

Target
692d875e313505a440a26cddc5ea4ee0_NEIKI
Size 301KB
Sample240508-mqldpsah43
SHA256 b13bca5b9aac295b7ba304e31285911c16604b5734cbe0a144403310009c60e3
MD5 692d875e313505a440a26cddc5ea4ee0
SHA1 65987646da8acfe3e213a8578679fdb9fb8d17d3
SHA512 ea78c016250fe40c201b474ea109657ba26457db50427785d35a5ff8e3fa15bf6ab2007f662d05225bd1728f58f4377f75bc96ea2a330f2e0f37120157c36fa8
SSDEEP 6144:rhA+z+/XGOiSlvOlcZ5A9CNl/az4tGoLItW8bfw4NrkeT:dA+z+/XhTOF9Sl/az4K/k2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
692d875e313505a440a26cddc5ea4ee0_NEIKI

File Explorer

692d875e313505a440a26cddc5ea4ee0_NEIKI

.exe 301KB

692d875e313505a440a26cddc5ea4ee0_NEIKI

IMPHASH 0dd2ed6ff4045422a368004f6eab317a
SHA256 b13bca5b9aac295b7ba304e31285911c16604b5734cbe0a144403310009c60e3
MD5 692d875e313505a440a26cddc5ea4ee0
SHA1 65987646da8acfe3e213a8578679fdb9fb8d17d3
SHA512 ea78c016250fe40c201b474ea109657ba26457db50427785d35a5ff8e3fa15bf6ab2007f662d05225bd1728f58f4377f75bc96ea2a330f2e0f37120157c36fa8
SSDEEP 6144:rhA+z+/XGOiSlvOlcZ5A9CNl/az4tGoLItW8bfw4NrkeT:dA+z+/XhTOF9Sl/az4K/k2
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

17294

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalMemoryStatus SetFilePointer InterlockedIncrement InterlockedDecrement GetComputerNameW LockFile BackupSeek GetModuleHandleW EnumTimeFormatsA SetCommState GlobalAlloc GetVolumeInformationA GlobalFindAtomA GetLocaleInfoW GetConsoleAliasW WriteConsoleW GetSystemDirectoryA SetComputerNameExW CreateActCtxA GetACP GetLastError SetLastError GetProcAddress RemoveDirectoryA SetComputerNameA BuildCommDCBW LoadLibraryA CreateHardLinkW SetConsoleOutputCP AddAtomW CreateEventW LoadLibraryExA VirtualProtect GetVersionExA ReadConsoleInputW GetWindowsDirectoryW GetTempPathA SetFileAttributesW CommConfigDialogW CloseHandle CreateFileW GetStringTypeW EncodePointer DecodePointer IsProcessorFeaturePresent GetCommandLineW RaiseException RtlUnwind HeapFree HeapAlloc IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW ExitProcess GetModuleHandleExW AreFileApisANSI MultiByteToWideChar HeapSize ReadFile GetConsoleMode ReadConsoleW SetFilePointerEx GetCurrentThreadId GetProcessHeap GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetConsoleCP GetCPInfo IsValidCodePage GetOEMCP LoadLibraryExW HeapReAlloc SetStdHandle LCMapStringW FlushFileBuffers OutputDebugStringW SetEndOfFile

user32

SetMenu GetCaretPos

Sharing

General

Malware Config

Signatures

File Explorer

692d875e313505a440a26cddc5ea4ee0_NEIKI

kernel32

user32

generic