d40aede82b9615c2ad757cfdff3b5630_NEIKI | Triage

Sharing

General

Target

d40aede82b9615c2ad757cfdff3b5630_NEIKI
Size

28KB
MD5

d40aede82b9615c2ad757cfdff3b5630
SHA1

28fc930d46a7d81c104a686d5c9e3b0af45a8f08
SHA256

922189cc0aab763100b03d1fdb3da250953d45da71deb97ffa8f47a1b1d76032
SHA512

d19b7a7a7fdd6afff19c5bd5f73873fca94e731b4e73ca1d159eedba8ababc54b118c29fdebc1226b835b43ef7b0b3f6ddd8d71414bf559dd007798097a8a682
SSDEEP

192:OAKYbdPr8KXPpzhDou3ouJorFYxdg+AiXQ2ZO:OyTNXxzhou3ZJEFYxdbAiNO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d40aede82b9615c2ad757cfdff3b5630_NEIKI

Files

d40aede82b9615c2ad757cfdff3b5630_NEIKI
.dll windows:4 windows x86 arch:x86

63689c0ff7201b0aa220fa220473dc4e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
WriteFile

user32

LoadStringW
LoadIconW

msvcrt

_adjust_fdiv
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
__CxxFrameHandler
_ftol
free
_initterm
malloc

Exports

Exports

CreateMvt
GetMvtHelpFileName
GetMvtID
GetMvtIcon
GetMvtName
GetNumberOfMvts
IsUnicode

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ