f3e2e6c3b85c19e9414337cf3e478ad0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f3e2e6c3b85c19e9414337cf3e478ad0_NEIKI
Size

9.1MB
MD5

f3e2e6c3b85c19e9414337cf3e478ad0
SHA1

80fa76ab3b05db9682e7dedb88806e2dcc35f4f1
SHA256

65afbc7708251df8349e12446b2bcc354bb40e6d59c45bb2b2d3aaa6032acc77
SHA512

d7239448cc03b88feaaec0b5aa2641a8e8d602bbeea72fa1688164aa8574e59cdc7c8ade0eb6265bb65a3a74f3e0d488d14261cb85ec6ff8d915c03d3098d85e
SSDEEP

196608:U2Nkr2f5GUtTdGIO4+Ytz1XEbK4dDgUbMEuwevi/2veDgp9ISTB:RfdGX4fLMDtbMPZeIeDgcSTB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f3e2e6c3b85c19e9414337cf3e478ad0_NEIKI

Files

f3e2e6c3b85c19e9414337cf3e478ad0_NEIKI
.exe windows:4 windows x86 arch:x86

c9749513208288305099900ce01b1603

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
ExitProcess
lstrcatA
lstrcpyA
RemoveDirectoryA
DeleteFileA
FreeLibrary
CloseHandle
GetProcAddress
LoadLibraryA
WriteFile
CreateFileA
lstrcmpA
lstrlenA
GetFileAttributesA
GetTempPathA
GetModuleHandleA
GetFileSize
GetModuleFileNameA
VirtualAlloc
VirtualFree

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.gentee
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ