e5e869c73cc51bcaaf85939335ed1430_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e5e869c73cc51bcaaf85939335ed1430_NEIKI
Size

119KB
MD5

e5e869c73cc51bcaaf85939335ed1430
SHA1

87f0ae3b9e38a31fe9b708956b3e2a6b0de0b337
SHA256

853f81d13f26ec7ddbb9c576cd6257745832a4def1c4f7808974b1412902a380
SHA512

72ad32aec981bebfb4c57af5894d3162de28bfffbe4fce539764395e0907f3949e8cc16d79fcce57326e77c292e272821ce63e4fd813209474fa40af4df82abb
SSDEEP

3072:CQ0b5iP3FNal68fJAM+W7zJHuh9U3eAEwkxVG4ftHeUYAKaS:Cz5S3nu6YCM+KNOh9WVH4sUYd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e5e869c73cc51bcaaf85939335ed1430_NEIKI

Files

e5e869c73cc51bcaaf85939335ed1430_NEIKI
.exe windows:4 windows x86 arch:x86

8fb70932c0ed28dcb810895eb0beb49a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseThreadpoolCleanupGroup
GetThreadLocale
CompareFileTime
BasepMapModuleHandle
lstrcmpiW
GetConsoleCharType
IsValidNLSVersion
WaitForThreadpoolWorkCallbacks
WriteConsoleOutputAttribute
QueryProcessCycleTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE