4efb669a25e1720fc9d03e74ba7b43f0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4efb669a25e1720fc9d03e74ba7b43f0_NEIKI
Size

30KB
MD5

4efb669a25e1720fc9d03e74ba7b43f0
SHA1

4e1dcf09d2542e76e693b934d4add039bff50dea
SHA256

6d861f0e2ffdabed90da42f82829ef1ca4e91bb5cb365934e795de7ed67ca1ac
SHA512

b1b96891f8ddd75a68aeaf012b0b6f7e2ac357b0475d7ad5b8cb3004c4ac39079ef7022f4b2f537ec42b481a02920c95599927d4a16677bab08a84d10ce4d24c
SSDEEP

768:oQD6Y5965VR6rUhp6B16Nf//ys1tZYjS0HZzBMsTpW80FpAn5by/zJK:yhlKrS03xdR0Fan5QA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4efb669a25e1720fc9d03e74ba7b43f0_NEIKI

Files

4efb669a25e1720fc9d03e74ba7b43f0_NEIKI
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

RVExtension
_RVExtension@12

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ