eab583f42479ad7d11c9331e42bc0ae0_NEIKI | Triage

Sharing

General

Target

eab583f42479ad7d11c9331e42bc0ae0_NEIKI
Size

20KB
MD5

eab583f42479ad7d11c9331e42bc0ae0
SHA1

6238de3214c9f2877bd057a88a12bbc3419ad6ef
SHA256

0c694c8bb23d771b96425f4781acd52304ee54fa07319813938cd0fa42534db7
SHA512

fac4fbab7f683a11d948c241d4188fb4d76463b0d6da673e11277c38beb3fee57db242b70b040127b73705075cb25d47e97010d6c2f9932459892973cee8c673
SSDEEP

384:jIz4Apz1qbyU6IBsdZzpfucfoGXxDCsfwa2qPXknPmddwVpTHRR0:jIUmz0bJ6AszzpmqxdfR2YU+ddwVD2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eab583f42479ad7d11c9331e42bc0ae0_NEIKI

Files

eab583f42479ad7d11c9331e42bc0ae0_NEIKI
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE