3d787948c87a64adbe04706c33f8d950_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d787948c87a64adbe04706c33f8d950_NEIKI
Size

127KB
MD5

3d787948c87a64adbe04706c33f8d950
SHA1

5ae80b9b16eac07f0dbc24e1fc32b96e312b8d3e
SHA256

373189785a6416355603e4224e64a25c6d9ec0b458a4b6d6d6a0125ec8f067c1
SHA512

b3f38257400686eef509b6b7321bb24c3f157f3c95e4cdebf49958e4f681df028ccdef6a4e0b00a6320e84ca7de9b44834a06cdeb4b28d464e98702a0499f299
SSDEEP

768:b7uHj94SaX5dbRHhdkGXP8wAQscRtlu+FAr4ygtxFsPMXXKvAE8wrJh07:3uiSC5dbpheGfnAQxh5FAr4ygGPN07

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d787948c87a64adbe04706c33f8d950_NEIKI

Files

3d787948c87a64adbe04706c33f8d950_NEIKI
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ