8faa66113ab20f8818371c9d1fc06b40_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8faa66113ab20f8818371c9d1fc06b40_NEIKI
Size

72KB
MD5

8faa66113ab20f8818371c9d1fc06b40
SHA1

2d22dc2b277d75f807a88800a9597c060591b95b
SHA256

7e236bce47c2e552c05a4ee406070d680e241943e248a49a1a1f55e56363945f
SHA512

c15ffe3fffdd0aae823aea48f8fafb6284101022b8d9157d987b83da36c691aabe788640fd34c12a50eb1dd446e4fe9215b9f95323a7a89014049f0f9aa9dac9
SSDEEP

1536:xKdfT8V+Hd2iTAmi6tWb1j8dtbLvUdUsnW/YqFmt6M7wevvYQweUWW1:AT8V+Hd2iTAatWb1j8dZv3QqFmt6awe8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8faa66113ab20f8818371c9d1fc06b40_NEIKI

Files

8faa66113ab20f8818371c9d1fc06b40_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE