2a8c2f2cf3832aa5b5f18e540c2adbf0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a8c2f2cf3832aa5b5f18e540c2adbf0_NEIKI
Size

63KB
MD5

2a8c2f2cf3832aa5b5f18e540c2adbf0
SHA1

a1c3c52577589a457a65019dd8ada29ce73a09eb
SHA256

ac2b705a30affb7eeff6b2461b661ebc8e0be67b6906ef135acd24bbd4fc2c5f
SHA512

82d37697ee6c3420b3921ae94cb38be1d6f0135b993ac26dc34a8c85080f59bd5c0746407d615ceb061510e8d5841a5791bde12d3615cbfc751346f33ec2375b
SSDEEP

1536:NwqrKh7eBE2x9U+WhWN7bqwgMVtg/VqWXxg/8bKo9:N5rKojU+WhWN7bqwtVt+q4xmmKi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a8c2f2cf3832aa5b5f18e540c2adbf0_NEIKI

Files

2a8c2f2cf3832aa5b5f18e540c2adbf0_NEIKI
.exe windows:4 windows x86 arch:x86

0781cf2086b02763bacaaa4e9f1acab0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
GetSystemWindowsDirectoryA
SetInformationJobObject
GetFullPathNameA
GetVolumeInformationW
IsWow64Process
GetDateFormatA
SetConsoleOS2OemFormat
CompareStringA
GetPrivateProfileStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE