34ba259e5d9bcb5c511aa045fc30fff0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34ba259e5d9bcb5c511aa045fc30fff0_NEIKI
Size

3.6MB
MD5

34ba259e5d9bcb5c511aa045fc30fff0
SHA1

67f2e25bf02614e1aea2296456c89c27457ad819
SHA256

04ba9a16dd9b544f15afe582e09f9b04b683c96c5a58022354c87ce89d959e6c
SHA512

049c794d8d657cada049411217f9d5e9c24f4c69b10f58b4ae4df35e38467617cb0145832981fde2500a3ba883a8ddc11b415ee53ad058f37aa9a44c3deeb645
SSDEEP

49152:cI3NCUTIvv9M84zNKxC9Y5lpuGIPQxMXj8iuF2QJ4O8b8ITDnlvjpL6BYWWhipXq:cMC3n9MzgxC9Y5lpuG89pEoD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34ba259e5d9bcb5c511aa045fc30fff0_NEIKI

Files

34ba259e5d9bcb5c511aa045fc30fff0_NEIKI
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 311KB - Virtual size: 311KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ