97e7f5117ce1520c2e72d37addbe8cc0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97e7f5117ce1520c2e72d37addbe8cc0_NEIKI
Size

119KB
MD5

97e7f5117ce1520c2e72d37addbe8cc0
SHA1

ffc28a37827ec32fe1ff2890fd2905ad9d9ce25f
SHA256

5f38d3e0306df86fbf4f9fcd7b82cb49f5609ad11a35bead7919941886402b34
SHA512

270a75887c35d189b569c11811866d9ee41a4dd41967a3b23ddfa84b65372d9978c2c603add59d82c919af158b2b85957ff94a40a7ccf0333b1fdbdc4d24070f
SSDEEP

1536:HSokdcFxx06ky869Z1qAOfd+jGJAwuWEyHjg49LJfCAZJM7rQbgy1nqkhZHmvNbM:H7kmf02Lg4jGik3rJqgM/Qb5zHQb6jqg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97e7f5117ce1520c2e72d37addbe8cc0_NEIKI

Files

97e7f5117ce1520c2e72d37addbe8cc0_NEIKI
.exe windows:4 windows x86 arch:x86

d152847673e42ac310dbf76332dc33e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AppXGetOSMaxVersionTested
SearchPathW
GetConsoleInputExeNameW
ReadConsoleW
BaseCleanupAppcompatCacheSupport
lstrcpyA
Process32FirstW
SetConsoleOS2OemFormat
GlobalFree
CreateProcessA
GetFullPathNameTransactedW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE