a755a2371b4c42704cdeb02e6bf467b0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a755a2371b4c42704cdeb02e6bf467b0_NEIKI
Size

119KB
MD5

a755a2371b4c42704cdeb02e6bf467b0
SHA1

3d3adb24c68d8974937176a7b5123216c30268ea
SHA256

72f44293a7787517e53498eb23620986b04896f71ea5634acd58701f6994856d
SHA512

7b599fd0f8b1d6d67155c92ba2adc3de61e628fa6cd5972866b7615f4b1231cecb07f556405b62368de691614d60300fd68fed050a8eda952c849fc5ed5ac980
SSDEEP

3072:/uBVg32i//UlnpU/UJAZxz5hRb8akTC8JlWmyNX/kCos:/u/g32i0nUsSZxthiJCAWTpx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a755a2371b4c42704cdeb02e6bf467b0_NEIKI

Files

a755a2371b4c42704cdeb02e6bf467b0_NEIKI
.exe windows:4 windows x86 arch:x86

93c2c30f62e062c637ff2f72ab18e59d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStructA
DeleteFileTransactedA
WerSetFlags
LZCopy
SetTermsrvAppInstallMode
BasepIsProcessAllowed
BasepGetExeArchType
InitAtomTable
FindCloseChangeNotification
GlobalWire
FindResourceW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE