a48d2da0411b507885af0a07334ce5e0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a48d2da0411b507885af0a07334ce5e0_NEIKI
Size

24KB
MD5

a48d2da0411b507885af0a07334ce5e0
SHA1

fbc29cb265cb5393295c6b3bbafafcb1d38ec5a9
SHA256

60fe17edb36b69e0cc51d8f01496e6565c08077a1041ad44a2d751e3a61436d2
SHA512

a5ffd513d0d48bc4740f7c7bd47d0cb9bf2cf2c8f454d4b23f534c8c43a5a472d40412884cacfb3d5b98102b36bb069ff3f309d8c360cf88c9e04fe122a6e82b
SSDEEP

384:ErzP03bvDV6NAb4b69+g3bDA75vWM5DiNsCrxzUeQAzKF4f7eaAnHcGpUkgfR6s:Erz03d6NG429R3bcv5Dim896PpUkgfd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a48d2da0411b507885af0a07334ce5e0_NEIKI

Files

a48d2da0411b507885af0a07334ce5e0_NEIKI
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE