23430ca4c4e3103f1b0a669fd8ac03a0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23430ca4c4e3103f1b0a669fd8ac03a0_NEIKI
Size

607KB
MD5

23430ca4c4e3103f1b0a669fd8ac03a0
SHA1

ff7221d15248c3da7c1c4aa7a76d0497935b8da1
SHA256

4fcd03255c0ac070688155983f33757ed6d8594f026a23c1608620a98cb1d3ee
SHA512

aed52f58d609f0197215aa11c795ef907c753d0bedf54fc666a23c1fcbb9c8c92ecca4e1d6f56048061b5d54446fc8d8528baba1759ea5f66dab968abf0ed04f
SSDEEP

12288:CP9bdzGbaowy6snjw5gBkCNS9FVYmG5Qzy+yymz:M5dSGLsnj3Bkk+FVJigyd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23430ca4c4e3103f1b0a669fd8ac03a0_NEIKI

Files

23430ca4c4e3103f1b0a669fd8ac03a0_NEIKI
.exe windows:4 windows x86 arch:x86

19c27f4e831be69fb8651f23f450df25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWindowsDirectoryA

oleaut32

VarR8FromCy

user32

GetCursor
GetMessageExtraInfo
GetCapture

Sections

.text
Size: 605KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE