1bbe3403ee8647eb0392b828556737e0_NEIKI

Sharing

Copy URL Twitter E-mail

General

Target

1bbe3403ee8647eb0392b828556737e0_NEIKI
Size

5KB
MD5

1bbe3403ee8647eb0392b828556737e0
SHA1

bade10cc63c0b7f690ccdd04c85f7146b4087a55
SHA256

eaa0730059e1c20a4fc5734b1f9680545c9a219601bfd70f4025c0c25b180654
SHA512

6c3ff886b1c0fd9972fa15f24a0a594c28b2361180c592e08c7eddf47509a2bca58fcfb5094ff5afac686ebdbd4708adfc7f6802509f84f2c3256e74e86590b5
SSDEEP

48:auoBIcHOYUxtgBkKPD6uyskM7+ssgz4RuLuDdJCizzodKFYA3Z89bil:6CcHOX5wDLrX7+CxLuxFgdKKvQ

Score

1^/10

Malware Config

Signatures

Files

1bbe3403ee8647eb0392b828556737e0_NEIKI
.sys windows:6 windows x86 arch:x86

1f0cc59ecc446932707b46f94b650f2b

Code Sign

15:3b:0f:04:a4:31:5f:8a:46:13:61:3e:a4:8e:d9:98
Certificate

Issuer

CN=WDKTestCert admin\,132931667665369947

Not Before

31/03/2022, 02:19

Not After

31/03/2032, 00:00

Subject

CN=WDKTestCert admin\,132931667665369947

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageKeyEncipherment
KeyUsageDataEncipherment

e3:08:a8:ff:f9:2d:15:89:a5:cc:6a:0c:33:e4:f0:e9:09:8b:5f:9a
Signer

Actual PE Digest

e3:08:a8:ff:f9:2d:15:89:a5:cc:6a:0c:33:e4:f0:e9:09:8b:5f:9a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\VsCode\Driver\SimpleSerialPort\SimpleSerialPort\Win7Debug\SimpleSerialPort.pdb

Imports

ntoskrnl.exe

KeBugCheckEx
RtlUnwind

Sections

.text
Size: 1024B - Virtual size: 933B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f0cc59ecc446932707b46f94b650f2b

Code Sign

15:3b:0f:04:a4:31:5f:8a:46:13:61:3e:a4:8e:d9:98Certificate

Extended Key Usages

Key Usages

e3:08:a8:ff:f9:2d:15:89:a5:cc:6a:0c:33:e4:f0:e9:09:8b:5f:9aSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntoskrnl.exe

Sections

.text Size: 1024B - Virtual size: 933B

.rdata Size: 512B - Virtual size: 340B

.data Size: 512B - Virtual size: 24B

INIT Size: 512B - Virtual size: 170B

.reloc Size: 512B - Virtual size: 84B

15:3b:0f:04:a4:31:5f:8a:46:13:61:3e:a4:8e:d9:98
Certificate

e3:08:a8:ff:f9:2d:15:89:a5:cc:6a:0c:33:e4:f0:e9:09:8b:5f:9a
Signer

.text
Size: 1024B - Virtual size: 933B

.rdata
Size: 512B - Virtual size: 340B

.data
Size: 512B - Virtual size: 24B

INIT
Size: 512B - Virtual size: 170B

.reloc
Size: 512B - Virtual size: 84B