5c090899c6f365fb19161f18df6f5590_NEIKI | Triage

Sharing

General

Target

5c090899c6f365fb19161f18df6f5590_NEIKI
Size

4.0MB
MD5

5c090899c6f365fb19161f18df6f5590
SHA1

c086f9efb6ba135d890417bd3fab396ab86d9476
SHA256

b91e1eb08b08e1f5b53ea1f29aee6a6cbdbf9cf2c8cd93c1bc2394c665693d3f
SHA512

85f14c505c6ca82fa81d057a5fbc89f0c56593d433e75d33096c51114fa239b5818c4f2e0391948e4e7c9ff0508576485fa16d65a80dbe70dcfc9ee1a1f9384f
SSDEEP

24576:5boJ6pOGXt4tt2Tb18nRDyrf7Nnn4zlCEHqc6PAtKKMp/baSVQFH5Dj65GA:JoGOGXt4P8KnMrf7Nn4VKcJr3Fj65GA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c090899c6f365fb19161f18df6f5590_NEIKI

Files

5c090899c6f365fb19161f18df6f5590_NEIKI
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.data
Size: 751KB - Virtual size: 750KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extjmp
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extrel
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ