52e8cda6a897c7c35a0605ac573225a0_NEIKI | Triage

Sharing

General

Target

52e8cda6a897c7c35a0605ac573225a0_NEIKI
Size

119KB
MD5

52e8cda6a897c7c35a0605ac573225a0
SHA1

b1f5766e2c3b779592ebbb76653ee9069a0e03fb
SHA256

e632a0b321ec4835f93c8cca9c91ebf82e7e92c36fe83b23414f78dff12dd2ac
SHA512

80855f200e4b95c1186c99663c6c694a7997252b6bac14d939703a07a5e21fdce4c0ea0746d6b904104bac52be420e3582696a31cf0b751f916bb10675d5798c
SSDEEP

3072:aybKydFhl8F2c/E5oqVHHLGV2KeI5oGpyDFy6aWKaXFTJFTA:ak1l4TM5QYCMB4aXtA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
52e8cda6a897c7c35a0605ac573225a0_NEIKI

Files

52e8cda6a897c7c35a0605ac573225a0_NEIKI
.exe windows:4 windows x86 arch:x86

adc685c2b68a077cb022074578d7e78a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumaProcessorNodeEx
SetLocalTime
FreeLibraryWhenCallbackReturns
CancelDeviceWakeupRequest
GetThreadSelectorEntry
RemoveVectoredExceptionHandler
DuplicateHandle
GetProductInfo
CreateMutexExW
WerSetFlags

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE