fa5e05bd8dd0fbd672a754e4ea7d2950_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa5e05bd8dd0fbd672a754e4ea7d2950_NEIKI
Size

604KB
MD5

fa5e05bd8dd0fbd672a754e4ea7d2950
SHA1

c3dc7dbcf441efa4add13f1eb00189f01648fa52
SHA256

ef84d4fe040f65de255bf0e4b8bba37e9588b23ddd580279da4455f96f42b374
SHA512

d842cafd98ba8c35620cd9d6a3bcbdaa37229a56872402b1e0fe4dab5d0c22584ae6484c974864f48827eb2eeffb3a5039d01f94520d9d4feb648eadbeabbdfb
SSDEEP

12288:HhQ3jY3BWzXePU+keFqsqyWzS3yUFC3c8OluZ1q0MFrk85iQ7tuOjI:BQ3jY3cqnkuZW+31C386m5557TI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa5e05bd8dd0fbd672a754e4ea7d2950_NEIKI

Files

fa5e05bd8dd0fbd672a754e4ea7d2950_NEIKI
.exe windows:4 windows x86 arch:x86

31df91443d039c810205da8db9a9c58b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlTraceDatabaseEnumerate
ZwOpenIoCompletion

user32

GetDesktopWindow
GetForegroundWindow

kernel32

GetUserDefaultUILanguage

Sections

.text
Size: 601KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 286B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE