f38d87c99fae1854651e3f343c1f2ef0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f38d87c99fae1854651e3f343c1f2ef0_NEIKI
Size

1.0MB
MD5

f38d87c99fae1854651e3f343c1f2ef0
SHA1

bbbdd83166718c1b5aab05e98715ce14ca75914b
SHA256

968ea7f1ab171bff9b3e680a942eabae90da84f0fc81dfad5fc412b72c6c6508
SHA512

ae78e4682cf13752181a016d949da1cf243ab6f4994c344f4d587dc01a2a38ba7671453a9cd995e2181cea648ef60b781e383e9bd5ef831b0466daba93ef1d47
SSDEEP

24576:NF1oGf4u/OfDlEUKWflmTP33GiLmqxrt35E3Mvs:NF1opfU4Uj33i3+s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f38d87c99fae1854651e3f343c1f2ef0_NEIKI

Files

f38d87c99fae1854651e3f343c1f2ef0_NEIKI
.exe windows:4 windows x86 arch:x86

7909826cb72884560635663c8951a127

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

advapi32

OpenProcessToken

user32

ExitWindowsEx

version

GetFileVersionInfoSizeA

ws2_32

WSAStartup

Sections

VHqxTUpa
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IaDsgWGk
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE