53cc4ac1be6c2b7e8dc16000a7978de0_NEIKI

Sharing

Copy URL

Twitter E-mail

General

Target

53cc4ac1be6c2b7e8dc16000a7978de0_NEIKI
Size

91KB
MD5

53cc4ac1be6c2b7e8dc16000a7978de0
SHA1

64ea691c02a95415a7f9b79af7fb6f15e90c8611
SHA256

a2da6dea7ce36016c0dfd6e11799c46b178f24cbd4cedc35227d90c1fb2c8593
SHA512

87bf862c1b50aa7e40aa344ec107c79c77916e71f5d6f65be037cc69d8d3c220d8a60c8eb763066bdd8ee65b99dcf52439300a4ad2bca61c49fc2f949a5a91a3
SSDEEP

1536:OagnZW8LjH2hUnsZORXOjV/RORZBiENmOd6y2GusIKpvVAOv/5T3Eoj7FHlyqibY:OagnLLjH2hUnsk2G9iENmOdT2GusIKpT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53cc4ac1be6c2b7e8dc16000a7978de0_NEIKI

Files

53cc4ac1be6c2b7e8dc16000a7978de0_NEIKI
.exe windows:4 windows x86 arch:x86

d4ac513554eb1877256adade6f18c719

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
CloseHandle
CreateSemaphoreA
ExitProcess
FindAtomA
GetAtomNameA
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStdHandle
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetConsoleTextAttribute
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
printf
putchar
puts
scanf
signal
strcmp

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 192B

IMAGE_SCN_MEM_DISCARDABLE

/19
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE

/35
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_MEM_DISCARDABLE

/47
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE

/61
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE

/73
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_DISCARDABLE

/86
Size: 512B - Virtual size: 147B

IMAGE_SCN_MEM_DISCARDABLE

/97
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_MEM_DISCARDABLE

/108
Size: 1024B - Virtual size: 776B

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

d4ac513554eb1877256adade6f18c719

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 19KB - Virtual size: 18KB

.data Size: 512B - Virtual size: 144B

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 18KB

.idata Size: 1KB - Virtual size: 1KB

/4 Size: 512B - Virtual size: 192B

/19 Size: 2KB - Virtual size: 1KB

/35 Size: 16KB - Virtual size: 16KB

/47 Size: 3KB - Virtual size: 2KB

/61 Size: 3KB - Virtual size: 2KB

/73 Size: 2KB - Virtual size: 2KB

/86 Size: 512B - Virtual size: 147B

/97 Size: 6KB - Virtual size: 5KB

/108 Size: 1024B - Virtual size: 776B

.text
Size: 19KB - Virtual size: 18KB

.data
Size: 512B - Virtual size: 144B

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 18KB

.idata
Size: 1KB - Virtual size: 1KB

/4
Size: 512B - Virtual size: 192B

/19
Size: 2KB - Virtual size: 1KB

/35
Size: 16KB - Virtual size: 16KB

/47
Size: 3KB - Virtual size: 2KB

/61
Size: 3KB - Virtual size: 2KB

/73
Size: 2KB - Virtual size: 2KB

/86
Size: 512B - Virtual size: 147B

/97
Size: 6KB - Virtual size: 5KB

/108
Size: 1024B - Virtual size: 776B