b4a026934a70afe6098cb9dbd709b0f0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4a026934a70afe6098cb9dbd709b0f0_NEIKI
Size

96KB
MD5

b4a026934a70afe6098cb9dbd709b0f0
SHA1

73286fd59b0807f90682c3a5cd093686eb5ebcc6
SHA256

1d3337910d89430005253d47f8f480cd616ab1d5ec0de7dcab7bb3b6dc2c101a
SHA512

b54b749dfdcb76e30f83a79c588fc28b4a19c287efdeec80032546568957f8caba92a0f6ff0f8e88a969605d3c512a438b0cc6862637264aa7f66c3ead6bb7e8
SSDEEP

1536:MT1mG/SCxBdXFuU8cO7u2NbvdOc8VKUaOdNdRzMD6KV36ybqiL8ZV:MEGTjVFuU5UNZLKzpMDrt1T8ZV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4a026934a70afe6098cb9dbd709b0f0_NEIKI

Files

b4a026934a70afe6098cb9dbd709b0f0_NEIKI
.exe windows:4 windows x86 arch:x86

61349eb8f32aa9525a84e43899c6871a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
GlobalUnlock
lstrcpyW
lstrlenW
GlobalLock
lstrcpynW
GlobalAlloc
GlobalFree
lstrcatW
ExitThread
GetProcAddress
LoadLibraryA
GetSystemTime
CloseHandle
ReleaseMutex
GetLastError
CreateMutexW
Sleep
CreateThread
SetErrorMode
GetStartupInfoA
GetModuleHandleA

msvcrt

memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
rand
__CxxFrameHandler

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE