4b8e4942b1e60e05fa36abc55fec57b0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b8e4942b1e60e05fa36abc55fec57b0_NEIKI
Size

238KB
MD5

4b8e4942b1e60e05fa36abc55fec57b0
SHA1

9c0b486b87a8cc2d780ada3187ba480e8cd82117
SHA256

8cba36705f96ac297adeadc9f22d49f0764d155f29d93975e8db90a073f36b14
SHA512

472745d72e0d7f3b3a8b85785b914c50a066317d34d28953d035bb2a9edf440b9a7881ed1fa06caea17ddcf4417e89e051718296d7af9a089ceeb8f829834c8d
SSDEEP

3072:No1iC8/8+EvJcOlHOoKzoxC8/8+EvJcOlHOoKzoxLsShdiwHxA8/8+EvJcOlHOoB:No1iqvOdxzJvOdxzQsSvavOdxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b8e4942b1e60e05fa36abc55fec57b0_NEIKI

Files

4b8e4942b1e60e05fa36abc55fec57b0_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\CODE\CV\CVOneClickUtility\obj\x86\Release\CVOneClickUtility.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ