1fb63e6c3dae18dba790b7ad48758b60_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fb63e6c3dae18dba790b7ad48758b60_NEIKI
Size

119KB
MD5

1fb63e6c3dae18dba790b7ad48758b60
SHA1

e9ef70e425c21d7bbfe88305dae1b4580da4b017
SHA256

c4f27f62f9d51465a4fc0407ecf93ee0b9fd763af48d8547409b12ca026a4a24
SHA512

c66a116ef798d0e35b06c4e527a70ac42e10ad1df66bc839b2018839ea6f9e4da2af3dd721a5954fc9e064d0e4211808f4a5a1fe4ac05c1317f789c532c29b84
SSDEEP

3072:kWBrCvnoq14qccTH5jEd7hG1FHJbBM2H5jfZv:PBuvh1RccTH5jEdlSLbjZzZv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fb63e6c3dae18dba790b7ad48758b60_NEIKI

Files

1fb63e6c3dae18dba790b7ad48758b60_NEIKI
.exe windows:4 windows x86 arch:x86

ad3b20d763c3d70eade15a08b6ccaf35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryLengthW
RegDeleteValueA
GetThreadIdealProcessorEx
PurgeComm
GetSystemWindowsDirectoryW
BaseCheckAppcompatCacheEx
_hread
FindActCtxSectionGuidWorker
GetProfileStringA
GetThreadId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE