5a0baf5aeaa8322556c8d1851e234970_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a0baf5aeaa8322556c8d1851e234970_NEIKI
Size

80KB
MD5

5a0baf5aeaa8322556c8d1851e234970
SHA1

0df23962e58d44fce4a5fee23745200ffd30ff9f
SHA256

aea23fb6f9210bfa3ca44dea970d73aa40f3164052e6fb5c1e8718ddb71a3b06
SHA512

05b9f95255501ab60fc74df602eac5c6076357a1c606b880e8a8b4eb97a11ec5d7196f691fced70c60627f5615b5a6e16e9190e7d084664eb208b071b5995954
SSDEEP

1536:VgAkE+h+vf+QVJACCCqxbXCb3Tk+GA8dCq6ad8MRiRq/RQAe2RJJ5R2xOSC4BG:ViE+alJACCBS3T3GA8QFadPRiEeIrJ5/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a0baf5aeaa8322556c8d1851e234970_NEIKI

Files

5a0baf5aeaa8322556c8d1851e234970_NEIKI
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ