a9a2996c284bfe2adc28aa88be9214c0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9a2996c284bfe2adc28aa88be9214c0_NEIKI
Size

119KB
MD5

a9a2996c284bfe2adc28aa88be9214c0
SHA1

632d30e917ffd7adc51940c56ddf0b7db644c67a
SHA256

7480397765e49d015314ab3ab57ad196efe38f60b80a77aa143f5cd0ad8a31b5
SHA512

f70b456fffdfccdfded69baa8e19deb88a3c466f6e9e5b9eee33bdcbecce131635b8cf15853495a1dd6949a6240782b887b63701951456157c7e82cd2129e6c6
SSDEEP

1536:bgYJMv8XwxP9eBnowe1evvH1mkCkvb5C7IQfEnvKVq22ddGOcujkLJyYCChOx467:cww8oD6I7k87IQEnvKVptOcbLJhhOC/k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9a2996c284bfe2adc28aa88be9214c0_NEIKI

Files

a9a2996c284bfe2adc28aa88be9214c0_NEIKI
.exe windows:4 windows x86 arch:x86

41faf4b7138cb11cd2cb92fb4e185183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32FirstW
WriteTapemark
DebugActiveProcess
AddConsoleAliasW
K32EnumPageFilesA
RegOpenKeyExW
GetComputerNameW
_llseek
GetVersionExA
TermsrvOpenUserClasses
SetTapePosition
QueryThreadProfiling

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE