b9e2a4680962a3caf646f49c461c3bc0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9e2a4680962a3caf646f49c461c3bc0_NEIKI
Size

119KB
MD5

b9e2a4680962a3caf646f49c461c3bc0
SHA1

e4c9329ea92ac7684eee88d2317dc44a6e316d81
SHA256

eb09ad193192c3beeb115746a7ffb9b0dab580433705cb4f3af0402ad2062a63
SHA512

2fc33d0d0086c912741ac02d43daa22fba1218830329f16cefe5c77e9ebed922e8ffac3b2cc434b4913fd69a8dadddf48325c0ac9b4be2a18ff659f733a10ed1
SSDEEP

3072:1i+sdziEcMokY9Gp0iz7SFnPPJP0KQ8uh80HIqjC:8PiIYwaG7SFx0Kr7yZjC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9e2a4680962a3caf646f49c461c3bc0_NEIKI

Files

b9e2a4680962a3caf646f49c461c3bc0_NEIKI
.exe windows:4 windows x86 arch:x86

dce4792e52d081ff99810ada648d1930

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWriteWatch
GetFileAttributesTransactedW
NlsUpdateSystemLocale
BasepGetComputerNameFromNtPath
SetFileBandwidthReservation
ReadConsoleA
CloseState
GetModuleHandleExA
GetConsoleCharType
FindVolumeMountPointClose

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE