a14d82a67ca2d57c3334cbb2f9505d50_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a14d82a67ca2d57c3334cbb2f9505d50_NEIKI
Size

725KB
MD5

a14d82a67ca2d57c3334cbb2f9505d50
SHA1

b8b0691b9e2dc3a3fa6d3ddb14a77844ee4b6a70
SHA256

9a887e749b893a858eecd9607b49ab92c450f5d0aba3e3908e5441af5be5dd61
SHA512

c91498958b88ff106b199e043c6d39f9ed97acbf7625252bff79b63cec07298cb7fcb4500033c035f10d62389bbc0dfa149e63cd75f3251a1ba3981eb6727335
SSDEEP

12288:ILY5k2ix05j54OWPVdNeQAY6gh/SOPSKmFj8QPBk/ii9fZP0hyvRLapEbRKX28HE:ILYdiejCOSVdYQjhnPDa8QPBwiibRLa+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a14d82a67ca2d57c3334cbb2f9505d50_NEIKI

Files

a14d82a67ca2d57c3334cbb2f9505d50_NEIKI
.exe windows:4 windows x86 arch:x86

91d85bbba2bc5935c0aade29fd54db3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptAcquireContextW

user32

SendMessageTimeoutA
GetDoubleClickTime
DefDlgProcW

oleaut32

VarUI2FromDec
VarI8FromI1

ntdll

NtOpenObjectAuditAlarm

kernel32

GetVersion

Sections

.text
Size: 717KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE