ab6c7ee51433ea3b80f0d44d79e54f20_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab6c7ee51433ea3b80f0d44d79e54f20_NEIKI
Size

604KB
MD5

ab6c7ee51433ea3b80f0d44d79e54f20
SHA1

bd444e4032c67ea9e07e13c486618e9537f50ced
SHA256

a554250d1aec0aa72df5b8031f803c66ab7f1fd8a5130e5585c15dbd24a16fae
SHA512

e2a36af0f8b10a9f8eb181523a043eb3de6b82ac431b2d4234298f5ee1f78a814ace02e54a90b54eb8f81bb65dbedcf6ceeb81c16d239f65d3e74fb1884848e2
SSDEEP

12288:H3hQlxHGNdLDMFwHoyT8rdLPMC5B8MyQa0EJB9yC1XNLl:HRQlxUMqoyaLP3fg1Xdl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab6c7ee51433ea3b80f0d44d79e54f20_NEIKI

Files

ab6c7ee51433ea3b80f0d44d79e54f20_NEIKI
.exe windows:4 windows x86 arch:x86

ffae46fe27bd3e2c8b0e60ce7fff991c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SaferComputeTokenFromLevel

oleaut32

LoadTypeLib

kernel32

GlobalFix
GetCurrentThreadId
GetSystemTimes

user32

GetKBCodePage

Sections

.text
Size: 601KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE