c381df6869cc895e1b8be8a6bbd631c0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c381df6869cc895e1b8be8a6bbd631c0_NEIKI
Size

2.0MB
MD5

c381df6869cc895e1b8be8a6bbd631c0
SHA1

3fb5abbc61e8cdc3846d7dd4f093e6c13c04c15c
SHA256

91f932d70c6564dde1665c1a5f075e75c0c19cfd7ae7b0123ffa5c1bc4c3274a
SHA512

104883c9e6db0fe1915d18a36b0ed331e9bbf87e51f13a4460c948d61b0701f2e30dad8fe66ccc0eb4145d55e1bf166f847bf6f819fd1f41fe75fbd3019e9169
SSDEEP

24576:dvfhB1RpewMyY8vCSpnZyFcNZpKASUaOvXocSUKVAQHp2R8WUt0WjMqp4wqZ5Cy6:dB7RowK8aSnZ3K0jKViQDqZ5CyVljC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c381df6869cc895e1b8be8a6bbd631c0_NEIKI

Files

c381df6869cc895e1b8be8a6bbd631c0_NEIKI
.exe windows:4 windows x86 arch:x86

e39a16ae9305e2f0094600954f5e95c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetVersion

user32

GetDialogBaseUnits
GetInputState

Sections

.text
Size: 676KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE