d6e894ede642d989cca38b49119c23f0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6e894ede642d989cca38b49119c23f0_NEIKI
Size

119KB
MD5

d6e894ede642d989cca38b49119c23f0
SHA1

b090771362783b94409efacec65d7c07dc0a509d
SHA256

9f3a115b88ca49466638e670cefa0186628102553415784991caaf94f46880be
SHA512

247c6e26850cce3545ca50a2bebdc5ddb537c70cea1a3e8ce5a61cb56d7c39fc326550ce51ea4c35fbef8170b27e42af51b75a0dfed0651d73bbdafa1336c6a4
SSDEEP

3072:cAQrCZ+SgrGdwx/9StvSqG3qyUcTfBD2xOYJ/AMR7v/aeEb9z:DDKrGdwxFivS/UcTfoOYZF7qz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6e894ede642d989cca38b49119c23f0_NEIKI

Files

d6e894ede642d989cca38b49119c23f0_NEIKI
.exe windows:4 windows x86 arch:x86

7d2f16c766943760178b1f8adc7d29bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegQueryInfoKeyA
EnumDateFormatsExA
GetTapePosition
FindAtomW
GetConsoleKeyboardLayoutNameW
GetSystemDefaultLCID
DebugBreakProcess
GetStringTypeExW
CreateThreadpool
CreateHardLinkTransactedW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE