820ee5c64b94218ddb877ece837d4f70_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

820ee5c64b94218ddb877ece837d4f70_NEIKI
Size

23KB
MD5

820ee5c64b94218ddb877ece837d4f70
SHA1

06e07c271e08e55fde02d99bb2a7f21e75bad0b2
SHA256

29fbd33847ce5ed5716951f6e7f976cf795e5aea657b83faf70b8880f6b9361d
SHA512

8d3c7bcc2d1847c146a64ab2c95516997579dc1d123c8477c3d46f161ba3c42d7d28751cf0bee5e73199e01b05526afc9d523295aab0b387976ef11d6dbdf893
SSDEEP

384:jIz4BRY2DGlogR7F8NNaG9lHVFkEf9fwDZugc0ztQw7/miRgZNcGvLsoz0UZEF8q:jIUBSEGlWyG9lHHlgfzx7bRgeGvLsozk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
820ee5c64b94218ddb877ece837d4f70_NEIKI

Files

820ee5c64b94218ddb877ece837d4f70_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE