4974742d7be44e4c80cc65effd7f0dc0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4974742d7be44e4c80cc65effd7f0dc0_NEIKI
Size

5.5MB
MD5

4974742d7be44e4c80cc65effd7f0dc0
SHA1

0968737ea2d0eb335282a9309b755292f4450600
SHA256

0aa04c322224b872b13262d68df604ac749e87a42faa6b6586ca0f6da6f3d52d
SHA512

1c3dcf5fdcc71900df1d4fbe79c7eaf97a3f85d7c98a09cc628dd19617811a4e4fc6f45c46bc72cbd485d2b3d0a23283f1931ce3a9bed657ee6281f91fbd852b
SSDEEP

98304:xMo6GcVm4hrxfbwYomil0fCDBH6AqY3GJSkqX4qdnyxlYdd6R:xJBANsYopeYHbDyqIDlYddy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4974742d7be44e4c80cc65effd7f0dc0_NEIKI

Files

4974742d7be44e4c80cc65effd7f0dc0_NEIKI
.exe windows:5 windows x86 arch:x86

0931e97555ac33eb10aa9539fe890070

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetSystemInfo
VirtualQuery
GetLastError
MapViewOfFile
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
CloseHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 1.7MB

.idata
Size: 1024B - Virtual size: 682B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ