ec7f6aed5b6a793259d65c6168942760_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec7f6aed5b6a793259d65c6168942760_NEIKI
Size

786KB
MD5

ec7f6aed5b6a793259d65c6168942760
SHA1

a5fd6eaab44fea6adb3c844c333e0cc977c2bb89
SHA256

c86d92662e6bdba2a075cb14cf887c879392bbe22b969535ef0c47babd4f7e0b
SHA512

4adad0d620bf227ede3a80e1f81f3bc89dabbdfceade45bb05d98a693bd55b2525f89789d31f93bf404956a85b338d18e2a859370fcf4e81b94dd22ce4ef97c9
SSDEEP

6144:JaPWnbzr28XYIddNy7pgLMWAGyAj5pnpODupnzVoj5azU/cC6Y/5qtbCO2G:Jhn3S7WRyAj5S2zVP4JMCW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec7f6aed5b6a793259d65c6168942760_NEIKI

Files

ec7f6aed5b6a793259d65c6168942760_NEIKI
.exe windows:4 windows x86 arch:x86

fe5db82acba4930d8b7ddc4dcab540b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pbvm80

ord137

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineA
GetCPInfo
IsDBCSLeadByte
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetACP
GetOEMCP
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
RtlUnwind
VirtualFree
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
LoadLibraryA
WriteFile
GetStringTypeA
GetStringTypeW
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ