a289df730cae080fc817d385d27b0f90_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a289df730cae080fc817d385d27b0f90_NEIKI
Size

999KB
MD5

a289df730cae080fc817d385d27b0f90
SHA1

7116e122838d80f11cc843499c9b647048a7badf
SHA256

9dc0cd3cf927e5ec7299fecf0bfb0aa330b45ca1d993ea3322ad7a2587f20a7b
SHA512

18da32f836d08defb11a832898eb0b1d61681eea6d3c5ef720d64933347d901ae6af7749be5e8e576216b0ff64ab944d0024e0136ee9c31278c8223809303d14
SSDEEP

24576:kW3p+0P3IWfIBBngdaW6GUOUjFHpSxqSwZUz:kW393nIBBncaWDUljFHpS1OUz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a289df730cae080fc817d385d27b0f90_NEIKI

Files

a289df730cae080fc817d385d27b0f90_NEIKI
.exe windows:4 windows x86 arch:x86

89048a25c237a749f3f8b6d613e948ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
_lread
_lwrite
GetStdHandle
ReadFile
_lclose
_llseek
_lopen
SetConsoleMode
GetConsoleMode
CloseHandle
SetFileTime
CreateFileA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
GlobalAlloc
lstrcpyA
lstrlenA
lstrcatA
_lcreat
CreateDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrcmpiA
MoveFileA
GetModuleFileNameA
SetConsoleCtrlHandler
GlobalFree

user32

wsprintfA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 826B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE