f63e6af56e4daeac290b8dce38db2330_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f63e6af56e4daeac290b8dce38db2330_NEIKI
Size

119KB
MD5

f63e6af56e4daeac290b8dce38db2330
SHA1

c2e752c435779262668ea082604b5d461daefc7e
SHA256

87374e59957804932aac74e8ce3531b4bdcdb132da9dbbbe8788f4fe84348e31
SHA512

0df7d6afdef88544e24279d40e7798e253dc85adf7aa3f4cdb328aa58915fecc7b567c9e1eb5bb9c83e82c401c074e74fd73d58d6f780948a297f1e83fc82280
SSDEEP

3072:/9sMLS/Cm5R4EpbfNmvKVTzM3+q0vzypIEzV18v0YHHm:/9sMLS/CmTBpNm6TzMuq8ypIwdYHHm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f63e6af56e4daeac290b8dce38db2330_NEIKI

Files

f63e6af56e4daeac290b8dce38db2330_NEIKI
.exe windows:4 windows x86 arch:x86

837f9f1c803d291de295d83adda68334

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GetConsoleCommandHistoryW
GetTapeStatus
Process32Next
CommConfigDialogW
ClearCommBreak
QueryActCtxWWorker
MoveFileWithProgressA
RegFlushKey
GetConsoleHardwareState
FlushInstructionCache

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE