4beb68f7c7862439a5546b615ce96bb0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4beb68f7c7862439a5546b615ce96bb0_NEIKI
Size

1011KB
MD5

4beb68f7c7862439a5546b615ce96bb0
SHA1

7c67f85ab3ba305b04b7e1515dd90fd54a7aae2e
SHA256

f7506ef4ea78b44e89b80df70071900c32e3bcd7f3822c80f9f64f491d876cec
SHA512

2eef1e57acd5990b99117e8f9b6e81812818687b78429e460137ed0ed1185c1820ecd745f6abddb2c106dfa710324bcd12bef8e5248dbbf6a8cd6c522cd465f4
SSDEEP

24576:87CWlTJissd7pB4qBLi5lKG6+D8O8QRl/PjO7KX53RTh0tFda3G:ECWlIssZLi5lKr+gO84/rOO53RTqtiG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4beb68f7c7862439a5546b615ce96bb0_NEIKI

Files

4beb68f7c7862439a5546b615ce96bb0_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\Target\x86\ship\setuptools\x-none\Flattener.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ