ca1df955c0d50c1feedab2d90b8a8830_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca1df955c0d50c1feedab2d90b8a8830_NEIKI
Size

72KB
MD5

ca1df955c0d50c1feedab2d90b8a8830
SHA1

f628f15d965459affaa9119fbce4430c32da1f84
SHA256

f9e1cfe2ffb37d691ea4b2e103525f14d37b6e34b83b980dd8a1fbb5695b1475
SHA512

06bbcb6d75400f4913e7843c752bf476c15b4f7765a796d8ba249c9037e882aaced2b4aa2d58ddebdc0eae5719e3b4178ff53e237288566a251c7d91be481881
SSDEEP

1536:xER1uM+7VB6eAAHDnkP0nBXspxc2rmRCZm6:eR1uM+7VB4EDnkaBXQERf6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca1df955c0d50c1feedab2d90b8a8830_NEIKI

Files

ca1df955c0d50c1feedab2d90b8a8830_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE