071f4caefe42e24fcd82fb13a01f4a90_NEIKI

Sharing

Copy URL

Twitter E-mail

General

Target

071f4caefe42e24fcd82fb13a01f4a90_NEIKI
Size

2.9MB
MD5

071f4caefe42e24fcd82fb13a01f4a90
SHA1

20eab01639f84ed953bba6d3ce1dab38b45c258f
SHA256

059739d14f2555f08d5fe7ebda53f8f8c6f8f4176b3517d67f471c9da385af21
SHA512

d13d49437d38a39b04afb25c56945dfa572afff48d2e2fdf8f6faeb66cc537fab54f6d4e68f0ea13b6fd19cc535e3d5fbacc020f1651c628db1429e18c139892
SSDEEP

49152:k0P4bHtmGIFuXFO/Ise9yrRikYQOHhqfRdr4ADiYDyXSLf6sB8f3Najcl:5uHtFO/UQbY7B6BDoSL6OmiC

Score

1^/10

Malware Config

Signatures

Files

071f4caefe42e24fcd82fb13a01f4a90_NEIKI
.exe windows:6 windows x86 arch:x86

Code Sign

47:16:d5:20:eb:2f:98:6c:b1:28:b7:f9:07:2f:ee:de
Certificate

Issuer

CN=CrystalCloud group

Not Before

13-08-2023 21:00

Not After

13-08-2024 21:00

Subject

CN=CrystalCloud group

fc:a7:4c:f4:3d:ed:9e:8a:46:d3:cb:0c:4f:42:51:8c:b8:21:0b:fa:6d:6b:dd:ae:0a:6a:e2:76:94:14:d9:d5
Signer

Actual PE Digest

fc:a7:4c:f4:3d:ed:9e:8a:46:d3:cb:0c:4f:42:51:8c:b8:21:0b:fa:6d:6b:dd:ae:0a:6a:e2:76:94:14:d9:d5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 1.9MB - Virtual size: 9.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 18KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 293KB - Virtual size: 832KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 5KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 223KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 69KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qtmetad
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Code Sign

47:16:d5:20:eb:2f:98:6c:b1:28:b7:f9:07:2f:ee:deCertificate

fc:a7:4c:f4:3d:ed:9e:8a:46:d3:cb:0c:4f:42:51:8c:b8:21:0b:fa:6d:6b:dd:ae:0a:6a:e2:76:94:14:d9:d5Signer

Headers

DLL Characteristics

File Characteristics

Sections

Size: 1.9MB - Virtual size: 9.3MB

Size: 5KB - Virtual size: 16KB

Size: 18KB - Virtual size: 48KB

Size: 293KB - Virtual size: 832KB

Size: 5KB - Virtual size: 64KB

Size: 1KB - Virtual size: 280KB

.rsrc Size: 223KB - Virtual size: 1.4MB

Size: 69KB - Virtual size: 160KB

.qtmetad Size: 404KB - Virtual size: 404KB

.adata Size: - Virtual size: 4KB

47:16:d5:20:eb:2f:98:6c:b1:28:b7:f9:07:2f:ee:de
Certificate

fc:a7:4c:f4:3d:ed:9e:8a:46:d3:cb:0c:4f:42:51:8c:b8:21:0b:fa:6d:6b:dd:ae:0a:6a:e2:76:94:14:d9:d5
Signer

.rsrc
Size: 223KB - Virtual size: 1.4MB

.qtmetad
Size: 404KB - Virtual size: 404KB

.adata
Size: - Virtual size: 4KB