0e5191e0fdc08fbca1f11180aa66fa40_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e5191e0fdc08fbca1f11180aa66fa40_NEIKI
Size

119KB
MD5

0e5191e0fdc08fbca1f11180aa66fa40
SHA1

dd62bc713abc0d9b5eff701b569e0d77f29af700
SHA256

e5ee3a99dacf80347add7f9a833cf3d6792a6391eb74d28bc7c89c6bb0a86ab7
SHA512

9fbf39da78d2388c3d3c4ff75b6c882a44a3ecc02faa4368435fc211b88724c776c6ff5b30d8408048fef01218200e18b20d4546961870967db5cc589817daca
SSDEEP

3072:zLI9PiENE/LqhA+JRe29BoiQY/ihroBQViwuWfRoj:z8hNgMP779BX5i1oBQVxZ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e5191e0fdc08fbca1f11180aa66fa40_NEIKI

Files

0e5191e0fdc08fbca1f11180aa66fa40_NEIKI
.exe windows:4 windows x86 arch:x86

3e0c9a610308af0c9070b0b3923e47c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseWriteErrorElevationRequiredEvent
lstrlen
GetLogicalDriveStringsW
RemoveDllDirectory
ExpungeConsoleCommandHistoryW
K32GetDeviceDriverBaseNameW
GetCalendarInfoEx
SetXStateFeaturesMask
GetDateFormatWWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE