37a1ab9468d31dee8901c753d4363370_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37a1ab9468d31dee8901c753d4363370_NEIKI
Size

4.8MB
MD5

37a1ab9468d31dee8901c753d4363370
SHA1

e407955426122ab90cfa6bbe57f419c2fd2e312b
SHA256

9ae87359933ee154eca1bda00dab2a3c1ac9121b1c9c3bc900d0a2c8386c133a
SHA512

f84d88d0437411ef818e72cb552b0cf09f35faf99d46da1198bc4da4cf9787c5319caac444cf2cf246cb8f88e2d7790a7864df3fc84fd8b4448ac5475c44b6eb
SSDEEP

98304:YwFFnLvdNHmZgtQQEyNfdHk7aFLQoKi55I4MQ3Sdm8iOqdUklHiABvqQcFVRMU9S:YwfnvHRQQEyNfdHk7aFLQoKi55I4MQ3R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37a1ab9468d31dee8901c753d4363370_NEIKI

Files

37a1ab9468d31dee8901c753d4363370_NEIKI
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 233KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 16.6MB - Virtual size: 16.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ