0b2fdbfe21f98be8159f416376f4b080_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b2fdbfe21f98be8159f416376f4b080_NEIKI
Size

119KB
MD5

0b2fdbfe21f98be8159f416376f4b080
SHA1

7cec7f46da4d1e21856e3cb5c8cb4a37168fc6db
SHA256

83b586751f8e283bbdc211fc217d67066c8b2720232de5996b184032d6e78c9e
SHA512

25c9057e347b389fabb220a438a84df5d9063734f48925440ffdcfab4eddc1e3dde6707f0ba05544b7115c70ede2c34b8416b37ca487288714f61b7001c2a994
SSDEEP

3072:QvmV5ACF6c60r2Vo4oxhI4T7ABZzE/+sDigEM8zhTyz:a3CF6c4o4o/hATA+THS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b2fdbfe21f98be8159f416376f4b080_NEIKI

Files

0b2fdbfe21f98be8159f416376f4b080_NEIKI
.exe windows:4 windows x86 arch:x86

5167faef286e9dc99bb919b8a434108c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

timeGetDevCaps
GetCurrentPackageFullName
PssWalkMarkerTell
TermsrvGetPreSetValue
SetThreadPriorityBoost
CreateMailslotA
BasepReportFault
SetConsoleKeyShortcuts
RestoreLastError
SetUserGeoID

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE