4042328c372bc535b4fee6cb2327f790_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4042328c372bc535b4fee6cb2327f790_NEIKI
Size

173KB
MD5

4042328c372bc535b4fee6cb2327f790
SHA1

e3cefb2d3854ec72e867db70bb197a9e48db2009
SHA256

b20735b571e574685b8f940dd38ffe4969baa433300caf4ec49f9876f6bb4d38
SHA512

d21f6171ed0985c55b2e12cf50f036a662b6eff4200d75366379fbd4a799c9389e0c48b1c079d2d1b6d5c2826273574a67dd016e5879934698a9ccd0134b46a6
SSDEEP

3072:+mK+7Ff9p1BDVWXDf/j7+x7x4OeK0vDwSTbUogB:6kVWXDf+x4O9og

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4042328c372bc535b4fee6cb2327f790_NEIKI

Files

4042328c372bc535b4fee6cb2327f790_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\SVN_LOCAL\Code\Tags\Antero_Release_6.12.0006\Antero\AllMax.Antero.AllMaxConduit\obj\Release\AnteroConduit.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ