691afbcc9cc5edfd4bd9d990f6cae370_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

691afbcc9cc5edfd4bd9d990f6cae370_NEIKI
Size

13KB
MD5

691afbcc9cc5edfd4bd9d990f6cae370
SHA1

b06de1328be19df1002bdfb19f9bc2e4d72b52b3
SHA256

08fbbd981877f2dbb84c85d5a38d582b4bea9b78f96005138470c7e45f21d85e
SHA512

2678aeb943b260f41c7321da6d4170541e22aa5055925f15bd5b22dfe97ee5fb7c5ab0ec69a410c1b39d02d27e871f1d0dd7e00215c2edab68f32f16d41f3ef6
SSDEEP

192:paUokjkCaM6fLeMLYOs1T4sKGVFLsTpTyLt4TmxOQadkX:pNaM6fLeML1gMMoTpTyLt4TmxOtKX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
691afbcc9cc5edfd4bd9d990f6cae370_NEIKI

Files

691afbcc9cc5edfd4bd9d990f6cae370_NEIKI
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ