baca59f6416f865234e8945cc85c7770_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baca59f6416f865234e8945cc85c7770_NEIKI
Size

36KB
MD5

baca59f6416f865234e8945cc85c7770
SHA1

7e3a3b5ebcb80e99c02559c2129566e3b7242011
SHA256

0d562a8b13b89abbba330b2326810843915382181139e37e918ab34e819a94d2
SHA512

a753c8a1f09dde1378f94b2130e31685e25f1153fd5823c20121b127a50e2be79e0c6985c376f735e751e9989b87a671a0c4d0e5d1674822001a5a350adda57b
SSDEEP

384:4gX04B8O+BnCdWzgq/DD+Lq9Smcy/UxZ1KAxKFVz:4gX04iO+cro5dcSarRxKF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baca59f6416f865234e8945cc85c7770_NEIKI

Files

baca59f6416f865234e8945cc85c7770_NEIKI
.exe windows:4 windows x86 arch:x86

4f834f45fcf0414718b5bfd518c077bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
GetExitCodeProcess
CloseHandle
CreateProcessA
SetHandleCount
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetLastError
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE