bdad9a2f985076f28813dbd6769f9240_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdad9a2f985076f28813dbd6769f9240_NEIKI
Size

155KB
MD5

bdad9a2f985076f28813dbd6769f9240
SHA1

4dec3a03f2874b36eb66af928757acd4b19c671c
SHA256

835a175e83e6f1c3ba6f75585c820c20f21c8e4c451ba2d8eda541c894811a80
SHA512

748b1aa5d2db2027882bdf921b93cf09d302df762ae692f95f88151b387d593b22c390ec8bbf8982af4a017f1d51f82961fbbfbb87f6009272fa4f7ef425fd09
SSDEEP

3072:zoY0ALG7F60AM6r61ZNSaPK8bbuVSQJ0uOUR5Y7DFavjBooi:0Y0ALG7HAMt1ZEs+NJ0rMYXweN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdad9a2f985076f28813dbd6769f9240_NEIKI

Files

bdad9a2f985076f28813dbd6769f9240_NEIKI
.exe windows:1 windows x86 arch:x86

d7da4bd9d4700a09d4bb196f5ad9fd0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringW

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
RaiseException
GetModuleHandleA
CloseHandle
WriteFile
GetCurrentThreadId

crtdll

__GetMainArgs
exit
raise
signal

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 660B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 250B - Virtual size: 250B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ