48fb3025c9ccd8e91aa5a4b42d582e40_NEIKI

Sharing

Copy URL Twitter E-mail

General

Target

48fb3025c9ccd8e91aa5a4b42d582e40_NEIKI
Size

48KB
MD5

48fb3025c9ccd8e91aa5a4b42d582e40
SHA1

9637e3a653ea284bcffddc631d16865f598e569f
SHA256

d1a722dee55f5d00644c3c53ed7bf5e883cf89bc5f1f0824b15b3da3382ed9d4
SHA512

6d2567656c5d14f2c27d1edf736ee1e9d0f7939114cfa5ff83a0f5208f3ad1011daa268abf824bc0302fcaa7e95ad1be12fb820fb33dc43bdf20e995344ea3a9
SSDEEP

768:Ef6mvW5/g7QITSHoJRsf9sc0xA6nPzjnaHOyYyOAj6hBfJqkr:Ef6SW5/MTfJR8tGzl3AjIfJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48fb3025c9ccd8e91aa5a4b42d582e40_NEIKI

Files

48fb3025c9ccd8e91aa5a4b42d582e40_NEIKI
.exe windows:4 windows x86 arch:x86

e1506b52cbd6e9f1d11f75524de6c95a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
DeleteFileA
WaitForSingleObject
CreateMutexA
lstrcpynA
GetTempPathA
UnmapViewOfFile
SetEvent
GetCurrentProcessId
InitializeCriticalSection
DeleteCriticalSection
Sleep
LeaveCriticalSection
EnterCriticalSection
WaitForMultipleObjects
GetModuleFileNameA
SetErrorMode
GetFileSize
GetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
SetThreadPriority
CreateThread
GetCurrentThreadId
CreateFileW
MultiByteToWideChar
ReadFile
SetFilePointer
GetOverlappedResult
ResetEvent
GetTickCount
GetStartupInfoA
GetModuleHandleA
WriteFile
ReleaseMutex
CloseHandle
CreateFileMappingA
MapViewOfFile
GetVersion
GetVersionExA
CreateEventA

user32

UpdateWindow
DestroyWindow
KillTimer
PeekMessageA
SetTimer
DispatchMessageA
TranslateMessage
IsDialogMessageA
ShowWindow
SetWindowLongA
GetWindowLongA
DefWindowProcA
GetCapture
SetForegroundWindow
InvalidateRect
IsWindowVisible
LoadCursorA
LoadIconA
RegisterClassA
GetDesktopWindow
CreateWindowExA
GetWindow
GetClientRect
GetWindowRect
SetWindowPos

gdi32

GetStockObject

advapi32

RegOpenKeyExA
RegCloseKey
RegEnumKeyA

ole32

CoInitialize

comctl32

ord17

winmm

timeBeginPeriod
timeEndPeriod

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

msvcrt

__getmainargs
_acmdln
exit
_XcptFilter
_exit
_stricmp
_onexit
__dllonexit
_ftol
strncmp
_controlfp
??3@YAXPAX@Z
sprintf
??2@YAPAXI@Z
memmove
time
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
free
realloc
_initterm
malloc

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1506b52cbd6e9f1d11f75524de6c95a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

comctl32

winmm

version

msvcrt

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 976B

.tls Size: 512B - Virtual size: 12B

.rsrc Size: 7KB - Virtual size: 7KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 976B

.tls
Size: 512B - Virtual size: 12B

.rsrc
Size: 7KB - Virtual size: 7KB