4b06a6aa7b58ccfd04504f2380f9f320_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b06a6aa7b58ccfd04504f2380f9f320_NEIKI
Size

341KB
MD5

4b06a6aa7b58ccfd04504f2380f9f320
SHA1

3c43d8cc8a7a21a08d18e1dc300e4f8569b725ea
SHA256

92e029b639296a0c2e7a251934a5e4728b75da1a91a5246300ee1541e0075d9a
SHA512

0f60430897c69c5d96798eed9216de331b57ea485f161d54b1e4261b6a9414f8d68928d84e7d94ddab10e8f876eb742dd87a7d90817cae0e80aca54b9d73b86d
SSDEEP

1536:2OR2QkRxdsJsxmZAx0yEyokn4b55wWJRS82dj13UC5:2t9dQZAx0yEyokn4bAuRh2dx3UM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b06a6aa7b58ccfd04504f2380f9f320_NEIKI

Files

4b06a6aa7b58ccfd04504f2380f9f320_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\TC\BA\work\a6ced73020f7c967\Foundation\Windows\obj\Debug\Shell.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ