770160c85d38340cb3d747c6c6b510d0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

770160c85d38340cb3d747c6c6b510d0_NEIKI
Size

8KB
MD5

770160c85d38340cb3d747c6c6b510d0
SHA1

574c63abf56887d7e5b8d9884b808505ba95e05e
SHA256

8b60a2b7a7a91ac76a9b66a364caceb093c843d7549881e6987bbbf8bd9eb7bc
SHA512

7a39c3e122bfb6d9eadf2320ac02dc9f9eaa607edf63721b212ec5e0c47507aeb87be20b23699feb7337c8bad0c7190ecb11e95da953f107540ac237b6022262
SSDEEP

192:oSGiC6IfNpLHLhLcIRRIzKphLgLrGd210ya0OOB:o9iCRLHLhLcaeGnLgLrGdu0yap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
770160c85d38340cb3d747c6c6b510d0_NEIKI

Files

770160c85d38340cb3d747c6c6b510d0_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

h:\WindowsFormsApplication1\WindowsFormsApplication1\obj\Debug\WindowsFormsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ