25cc54797c00decb46c3c80cd9ac74e0_NEIKI | Triage

Sharing

General

Target

25cc54797c00decb46c3c80cd9ac74e0_NEIKI
Size

119KB
MD5

25cc54797c00decb46c3c80cd9ac74e0
SHA1

bb5a673b003410056a65ba6a94ce611b6c328e28
SHA256

cd2884be74534689f480aa0843931748b0bbe4cefd14d5bb1fb3cdec99f39498
SHA512

66bfdcb17a637db91b711b38aad0b09cf69105ddde12e8379942d1bed17a8d418d956431ecddf021e2c8c0c065062ce1ad5f07042bb97905327c62d3552b81a3
SSDEEP

3072:BwLBScAoQ57yEKpnMHnUpa22pisflTssE/oDf/nsoqWr:BwtqpVyEKpnuC+AilgsE/E/bq6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25cc54797c00decb46c3c80cd9ac74e0_NEIKI

Files

25cc54797c00decb46c3c80cd9ac74e0_NEIKI
.exe windows:4 windows x86 arch:x86

03c1184d2ef7468473c746de387cf50f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessMitigationPolicy
BuildCommDCBAndTimeoutsW
Wow64RevertWow64FsRedirection
GetVolumePathNamesForVolumeNameA
WerUnregisterRuntimeExceptionModuleWorker
GetTickCount
PostQueuedCompletionStatus
RaiseInvalid16BitExeError

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE