478dcdf47c1bd0d734c9f59fffb6b440_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

478dcdf47c1bd0d734c9f59fffb6b440_NEIKI
Size

119KB
MD5

478dcdf47c1bd0d734c9f59fffb6b440
SHA1

d228166b8cb78af3c40fcf0c5ccc0f9c5ce09f39
SHA256

ce3f0ca23e9f27c3200d4dcf130d364d706c14edd491dba521585c9108050e43
SHA512

beaac7904858b5bb1794dbcfa08c38bc5cf4fd6d3113147954a8f86ada484db524b54b9221505be862b1584ab59002fa769c8f14918459e5db2859b327a83f77
SSDEEP

3072:vk4igqqwzcHXl4NdTvgvvsViWMOTLQmnQBRk9mOa:M/TzcH1gdTc9wQmeumOa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
478dcdf47c1bd0d734c9f59fffb6b440_NEIKI

Files

478dcdf47c1bd0d734c9f59fffb6b440_NEIKI
.exe windows:4 windows x86 arch:x86

b15527e61619e2ec3f0d4d4625465169

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

timeEndPeriod
GetLongPathNameA
IsNLSDefinedString
CreateSemaphoreExW
ScrollConsoleScreenBufferA
lstrcatW
SignalObjectAndWait
GetProfileIntW
lstrcpyA
CommConfigDialogA
GetNamedPipeHandleStateA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE