f80dd082ceaffdbaf7166d744ecb73a0_NEIKI | Triage

Sharing

General

Target

f80dd082ceaffdbaf7166d744ecb73a0_NEIKI
Size

746KB
MD5

f80dd082ceaffdbaf7166d744ecb73a0
SHA1

baf8b2d5f860d7bf0c29d2b1fe01e89b9caf3e46
SHA256

721697a926f9b60c290f9f49f8563c25514d23095d4404e8c35bcb65c8324c62
SHA512

0384f21cf348abd56e18c84bdd6555f392425e430cbffb0e909d1e837af249d64bd9b6f04cd8e779e4f9a356f23605e00997739762eb16fb6d75c71395345085
SSDEEP

12288:sojI3EXncpxWg2wYJUuEn4FI3cWBt5+d8BT0no7wvG8QYS301VnaLEg:syiYquEn4ZWBty8+3GFYS301cF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f80dd082ceaffdbaf7166d744ecb73a0_NEIKI

Files

f80dd082ceaffdbaf7166d744ecb73a0_NEIKI
.exe windows:4 windows x86 arch:x86

110a7198a48581057e905a580d864c1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlSetTimer

user32

GetShellWindow

kernel32

GetCommandLineA

Sections

.text
Size: 739KB - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE