42b606f790959fda9894682640740690_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42b606f790959fda9894682640740690_NEIKI
Size

119KB
MD5

42b606f790959fda9894682640740690
SHA1

961dee9b71aad47485363fd78cdec89d58d63028
SHA256

7ff39e27cd6c3e81a292079479b4103a0abaa1834dd24b64b5d30c53caefb699
SHA512

84fda5ca8fcc654173841eed4491eb4b542787517fd46111b8f8691ae4ea2be8cbc933467791ce9e46c2d9510277a0bcda35db872fcc3448b5c676d554bd43e3
SSDEEP

3072:JxpvoPUfl83mNMkMFGTzZcfQo64Jp4WdWELcDMRj8JC8:JYIMHk20WplRcEgF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42b606f790959fda9894682640740690_NEIKI

Files

42b606f790959fda9894682640740690_NEIKI
.exe windows:4 windows x86 arch:x86

cea1ec93b6a8cbf3ed6ba0d151b261b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BaseFormatTimeOut
NotifyMountMgr
GetDateFormatEx
GetLogicalDriveStringsW
ClearCommBreak
GetProcessWorkingSetSize
WerRegisterRuntimeExceptionModuleWorker
GetConsoleCommandHistoryLengthW
_hread
BasepProcessInvalidImage

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE