9caf3fbc65bce403226b07b35e3f1020_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9caf3fbc65bce403226b07b35e3f1020_NEIKI
Size

33KB
MD5

9caf3fbc65bce403226b07b35e3f1020
SHA1

65e21788685c1f9ce9248109b024cc2508ca57e5
SHA256

85ffcf08da96380d1834dbd822977f7f7772ba0a824fa6155581ee04c31af955
SHA512

bc9e11c92de78cb46bea23458246dd98127d4911de7870c794d9f543a5a693468955252748bf89dcd1b9696a974465f02d16ee13b5457111b1dc7a1be70ab69d
SSDEEP

768:/qPJtHA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhj:/qnA6C1VqaqhtgVRNToV7TtRu8rM0wYD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9caf3fbc65bce403226b07b35e3f1020_NEIKI

Files

9caf3fbc65bce403226b07b35e3f1020_NEIKI
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE