b8894b7d558e36a4f0515e30deaa8f90_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8894b7d558e36a4f0515e30deaa8f90_NEIKI
Size

119KB
MD5

b8894b7d558e36a4f0515e30deaa8f90
SHA1

8b12b400bbf70d9b71b1d9bd26b76cf641e9f706
SHA256

be0ac59b2783e74b122e5d7ed37916d2dabbfae5d36e9076b38ff2526e0958dc
SHA512

f83bf49ad7d03d53182ed7c27a62d815fb4440afe0ea72737fc428655cb82a5fbf7cd72e675657d33ead88bb1926677b86eb8935364f52856f0b91a1e8540e1f
SSDEEP

3072:qJXDUjgvFSbrGYybfGtLp22BE9sapkjyR:qtmjFyCiQEqep

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8894b7d558e36a4f0515e30deaa8f90_NEIKI

Files

b8894b7d558e36a4f0515e30deaa8f90_NEIKI
.exe windows:4 windows x86 arch:x86

a5e3e98e6148eab82022633fa713bc6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleMenuClose
LocalHandle
GetHandleContext
DeleteFileW
DebugBreak
RemoveLocalAlternateComputerNameW
GetSystemTime
DeleteFileTransactedA
GetConsoleHardwareState
GetSystemDefaultLocaleName

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE