26d096fe0b1e997456967ac23cec2c10_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

26d096fe0b1e997456967ac23cec2c10_NEIKI
Size

119KB
MD5

26d096fe0b1e997456967ac23cec2c10
SHA1

0a01149ae0e1c9001591b658809ff084a126df54
SHA256

dfb6e26c3f9d9db1e6789bc79d9b6206f7b38df5086917a85b22bbd3ea6880a1
SHA512

500889b6db7a570d3324872f8cc466a4bd70fc292ae4fee415a09861c856280992b44f936d9d83f7631c77e1ba4832bcb5e133955abf25f13cf78d44509225a4
SSDEEP

3072:S3mUNcPyAtU330N19LZkNFV0yoeXyo8PRoaO14egTFvrr5+S:KmUNOakn9LZ0FayUo8ax4egBDr5+S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
26d096fe0b1e997456967ac23cec2c10_NEIKI

Files

26d096fe0b1e997456967ac23cec2c10_NEIKI
.exe windows:4 windows x86 arch:x86

7bf65bc96204aec2d6c427cc0a12b233

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegUnLoadKeyW
GetConsoleOutputCP
SetFileTime
CloseThreadpoolTimer
Wow64SuspendThread
PackageNameAndPublisherIdFromFamilyName
AddAtomA
TermsrvSetKeySecurity
RegFlushKey
GetMaximumProcessorCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE