ee96a5e493265c51c4b3b00c4747e880_NEIKI | Triage

Sharing

General

Target

ee96a5e493265c51c4b3b00c4747e880_NEIKI
Size

119KB
MD5

ee96a5e493265c51c4b3b00c4747e880
SHA1

e4741c224c828d663f693c58c2684d28923138e9
SHA256

a47bb7bbc1d443768a3c7d728f342a3fbcc08be9bd45cad182610f9e5011f624
SHA512

ff417f1ee885d0c342f9206041266a1b7361ba13001215bfbd1195b0cf0e38d3770343f320f7bd2d414e9f5f9b0e7c44d1b6e9c0c4f48cd99309a87412f1ea46
SSDEEP

3072:Lts46SZIJUndXlHPkqbOlTyo/16TZfs1d:xsV6I2fzbOdyo/1WfOd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee96a5e493265c51c4b3b00c4747e880_NEIKI

Files

ee96a5e493265c51c4b3b00c4747e880_NEIKI
.exe windows:4 windows x86 arch:x86

535cb0b3661ed17c508a68952fa0bb16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWow64DirectoryA
GetCalendarInfoEx
DebugActiveProcess
GetEnabledXStateFeatures
QueryInformationJobObject
GetLogicalDriveStringsA
GlobalAddAtomW
GlobalMemoryStatusEx
GetEnvironmentVariableW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE