366dbc828dc5a9dd523202e8e473c7f0_NEIKI

Sharing

Copy URL

Twitter E-mail

General

Target

366dbc828dc5a9dd523202e8e473c7f0_NEIKI
Size

757KB
MD5

366dbc828dc5a9dd523202e8e473c7f0
SHA1

e3391cb61dd1938fef333ec0cd6e30f0e2b23b24
SHA256

3c374c174a1efa9a15e8b98f9246d0daa0d3f8f82aee16a251701fc84baf7836
SHA512

89e032d1d5dd99daa1acab203a1c9c1dd95f9709fca1d300b5e06755735141ca7f5e0d480a5583d524a31e4d0b80ee3cb2637df8fcade1ad150840591a112733
SSDEEP

12288:KKvQ9D5YbEJRbUEMYy82BOGkTOElF3pdwzvmKWB8c0aXduzVWHEax5jeHJ5N2TLj:KKeD51LQzYybOFTO+nGm1B8c0atuzVWf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
366dbc828dc5a9dd523202e8e473c7f0_NEIKI

Files

366dbc828dc5a9dd523202e8e473c7f0_NEIKI
.exe windows:4 windows x86 arch:x86

b602af8b728e30ae823af39717b37aa5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AreFileApisANSI
CloseHandle
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexW
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeLibrary
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
GetVersionExW
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitializeCriticalSection
InterlockedCompareExchange
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
ReadFile
SetConsoleTextAttribute
SetEndOfFile
SetFilePointer
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile

msvcrt

__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_access
_acmdln
_amsg_exit
_cexit
_errno
_exit
_fileno
_fmode
_initterm
_iob
_isatty
_lock
_onexit
_pclose
_popen
_setmode
_snwprintf
localtime
calloc
exit
fclose
fflush
fgetc
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwprintf
fwrite
getenv
isalnum
isalpha
isprint
isspace
malloc
memcmp
memcpy
memmove
printf
putc
putchar
puts
qsort
raise
realloc
rewind
setvbuf
signal
strchr
strcmp
strlen
strncmp
strncpy
strtol
_unlock
_wunlink
abort
system
tolower
vfprintf
wcscpy

user32

MessageBoxW

Sections

.text
Size: 588KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b602af8b728e30ae823af39717b37aa5

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Sections

.text Size: 588KB - Virtual size: 588KB

.data Size: 10KB - Virtual size: 9KB

.rdata Size: 75KB - Virtual size: 74KB

.bss Size: - Virtual size: 2KB

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 588KB - Virtual size: 588KB

.data
Size: 10KB - Virtual size: 9KB

.rdata
Size: 75KB - Virtual size: 74KB

.bss
Size: - Virtual size: 2KB

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1KB - Virtual size: 1KB