189d633d975801f85684c5f94f133bf0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

189d633d975801f85684c5f94f133bf0_NEIKI
Size

108KB
MD5

189d633d975801f85684c5f94f133bf0
SHA1

553ad511fcd84ef1bfb35c2179de069a6f35af04
SHA256

f7ca8f05cbbb9939e18f55b94db04570119e906b31c4e9a0578286607236c084
SHA512

04adeb818da50858af355a9b83116297394662597f196463ca69f7284751f74121d6166419e9aa44ae42af15a216dc9bf3832533333d0a86c4f5b930c73ef418
SSDEEP

3072:bdTwoOr57zoXdfcK7Q7pi08NI8mTZ0ruwIN7P85QU1Fu:dGXUdEK7Q7wq+ykL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
189d633d975801f85684c5f94f133bf0_NEIKI

Files

189d633d975801f85684c5f94f133bf0_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Tiger.MiddleWare.Upgrade.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ