d92ec67d8ba33beb8f8d2dbb1a7a7de0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d92ec67d8ba33beb8f8d2dbb1a7a7de0_NEIKI
Size

119KB
MD5

d92ec67d8ba33beb8f8d2dbb1a7a7de0
SHA1

35206b17835333fa79f5db6121b20c17d6c940be
SHA256

46df55e0b8f0759683a5cfda59fa0077b4babd53f616b71c8e81d98bcd0da6b8
SHA512

1b91ff4a1763b5ed7d309318a78548d68e5b1a031dd1a949d5cf60dc1686fdcffd240356c603f6145c8ab8777a0e38f52cffe916f39bfe73d4f0aa355996039d
SSDEEP

3072:iOreaglJlsJMOiI7aRBbRVv2uoY9cXTZ184cWgIl:i1agI7cBbR92u2j3mW1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d92ec67d8ba33beb8f8d2dbb1a7a7de0_NEIKI

Files

d92ec67d8ba33beb8f8d2dbb1a7a7de0_NEIKI
.exe windows:4 windows x86 arch:x86

03e73e9a15f64c3f35ad68287c824df0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegGetValueW
SetConsoleFont
SleepConditionVariableSRW
UpdateCalendarDayOfWeek
RemoveLocalAlternateComputerNameW
GetCurrentDirectoryW
GetPhysicallyInstalledSystemMemory
AddSecureMemoryCacheCallback
WerGetFlagsWorker

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE