aa4a5e18f5a90e554853109c7f9fbe50_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa4a5e18f5a90e554853109c7f9fbe50_NEIKI
Size

21KB
MD5

aa4a5e18f5a90e554853109c7f9fbe50
SHA1

6016e6d6d9e8172d973c2846336d5455e7789bb3
SHA256

75e39b16979b1aec9f2be47f40d180661b005f838f021c27aca1d78dd5253f0b
SHA512

48de0a2626f0c0cf268bf26d66723b6673facb45ad2c04ddb791c0485c06144ae0a800f430dc7adc1c686ad936ddc3d8aef831a2c7c7c74ad3ec53f78a1b2a07
SSDEEP

384:jIz4Zgwq71yjvzZ/6QeX6RW4rE0MVmP6Arek6ZEQzynPdd/lUyZxfNh73Q8F:jIUZgzMjv50X644oC9RlPdd/l5733F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa4a5e18f5a90e554853109c7f9fbe50_NEIKI

Files

aa4a5e18f5a90e554853109c7f9fbe50_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE