c01caf9801ef80c1967df0b345b05580_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c01caf9801ef80c1967df0b345b05580_NEIKI
Size

72KB
MD5

c01caf9801ef80c1967df0b345b05580
SHA1

9a36126b82db543e78ac4eec9504eda2432cca18
SHA256

91f1c376ba80b873cfd6b237cfeae3cdef4a2b7d5f8808cea379fdcddc3cc15f
SHA512

9f98c8eed02b84e697df29ded4f3a218d36f1173109d2f15a50ee964962e545d9d52bfa9a8d67535c2a142058afc6ac1c03fa712a86c236458ccd38309c4488b
SSDEEP

1536:xuZG3rqYGOJXGF6RlbOUWc7dFKJbeKHzl+v8KHD5oeJmqabq1HaF:4ZGbqGIeKHzQ8KHVoqmqaO6F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c01caf9801ef80c1967df0b345b05580_NEIKI

Files

c01caf9801ef80c1967df0b345b05580_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE