e2a6caefd2285901c10c8646608dcd00_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2a6caefd2285901c10c8646608dcd00_NEIKI
Size

59KB
MD5

e2a6caefd2285901c10c8646608dcd00
SHA1

4960773eef42b7a323f1d35ac7233d9f31cdacb3
SHA256

aae1feca46ea176578d103caab9b75d818a313e654bb424cb3eace401dd3f3b6
SHA512

28d2bd0cb30b44412e14400cceb1903ec46795ef45fa4dd72b3386970a33e74d906f8f3ad2f78daf0b33c9394a61c9780a6c82a37c136b17ecf5a4a45d575f17
SSDEEP

768:81axr3bpXrGNepVJabjQ+POQGsGl/hiabFYIyzLZEAvPHxf4g2cvBNinTUCjeKbR:7r3qepVSUIOTI0YxX9jrI7ZWTsefy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2a6caefd2285901c10c8646608dcd00_NEIKI

Files

e2a6caefd2285901c10c8646608dcd00_NEIKI
.dll windows:4 windows x86 arch:x86

ce9af8f7648044080f021c1c1c0f734f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pncrt

frexp
_CIacos
free
ldexp
_CIpow
_adjust_fdiv
??3@YAXPAX@Z
_ftol
_purecall
_initterm
??2@YAPAXI@Z
malloc

kernel32

DisableThreadLibraryCalls
GlobalAlloc
GlobalFree
GetVersion

Exports

Exports

CloseEncoder
OpenEncoder
spEncode
spFreeEncoder
spInitEncoder
spSetFlavor

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ