222261a7bab7b8d0f75c7cc78e5ec7a0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

222261a7bab7b8d0f75c7cc78e5ec7a0_NEIKI
Size

119KB
MD5

222261a7bab7b8d0f75c7cc78e5ec7a0
SHA1

6efc34b0be15b9b81aded2b4a40c951432642572
SHA256

22bd6811c019a402c667dc244362dfad95233f5c71f36b7d88dae01e1364479a
SHA512

e6d929608542505f921e6fbc9e031f46f4d6acef57c9db8b5470327affcd81635c4e13fb59341736b50c0788bd69d64ac1a706a3f9ebbf60d6f80c3a3df29a83
SSDEEP

3072:uBqmpQjeoeNfecEoBWVeHy5WUtS/jGDYEi+uLTP:uBqmpsANWd1P5WESr4Zi+uPP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
222261a7bab7b8d0f75c7cc78e5ec7a0_NEIKI

Files

222261a7bab7b8d0f75c7cc78e5ec7a0_NEIKI
.exe windows:4 windows x86 arch:x86

22f26a5d3e5808684ef2270dfc9bfd86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
FatalExit
WriteProfileSectionW
QueryThreadProfiling
SetXStateFeaturesMask
ConvertCalDateTimeToSystemTime
CopyFileW
Wow64GetThreadContext
FindFirstFileNameTransactedW
SetThreadpoolTimerEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE