cf3ac247217f34c8ad0acf96199a2cb0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf3ac247217f34c8ad0acf96199a2cb0_NEIKI
Size

27KB
MD5

cf3ac247217f34c8ad0acf96199a2cb0
SHA1

28a9d3d9a8dac39dc71e4d32eded51d3a9dda65e
SHA256

3b446d4e5dc74a3b51ed179f98aca47748793224dc8473657ddb21f2713f0b87
SHA512

75ecb02e1f8da032a18571c1c0e46d79c2f056aee2e0d5e71fd79207a3f27fa69522f7ac723bc7bf9fedb3ed14b8125e1c990154a5379efb5dbbf0d51277b5b9
SSDEEP

768:HqPJtGoA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfh7cF:HqmoA6C1VqaqhtgVRNToV7TtRu8rM0wv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf3ac247217f34c8ad0acf96199a2cb0_NEIKI

Files

cf3ac247217f34c8ad0acf96199a2cb0_NEIKI
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE