c2d42873e9351dec9d2f4710a7a5bbd0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2d42873e9351dec9d2f4710a7a5bbd0_NEIKI
Size

62KB
MD5

c2d42873e9351dec9d2f4710a7a5bbd0
SHA1

1913127e6577750a4d4c0613db838228c542b592
SHA256

bd223a5a489a0fa3352c1cdeea6ad98d71b734b44f2134d9d3ed49a586080f8f
SHA512

5595a950f0bd6e24899271e77312d34bda31a719e0c1301ceee7b0b834f5a2f3d254be504bbe35e04dcd894bc67d580c58371a10e281bf0c9a6f81febc0c3f56
SSDEEP

1536:paC1tYDOypdCzQ936JDI5JODz7CXhnq4LAsV:H1tgpoLH7CxnqejV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2d42873e9351dec9d2f4710a7a5bbd0_NEIKI

Files

c2d42873e9351dec9d2f4710a7a5bbd0_NEIKI
.exe windows:4 windows x86 arch:x86

42d6b9351cd34652d1bbc0795b4de288

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameW
GetEncryptedFileVersionExt
CreateMutexA
SetThreadInformation
FindActCtxSectionGuid
FindAtomW
GetThreadUILanguage
IsWow64GuestMachineSupported
EnumResourceNamesExW
CallNamedPipeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE