911ee727788f24b830c76ecd2359da10_NEIKI | Triage

Sharing

General

Target

911ee727788f24b830c76ecd2359da10_NEIKI
Size

196KB
MD5

911ee727788f24b830c76ecd2359da10
SHA1

6fed309654a5914ed53b933f318e25d2b745bfe1
SHA256

b126f01b88c9f1196d15146e25d5b6ec38bc456eec6286d9a85fe82e0c1468a8
SHA512

7fccdee124bc47c4e6ba0d1b557a3ef97219352cab50cae6d84c89891768883a0736b2b6ac0a49d93fbca8046b21844f1825383bc697f7acc63ac9dc8f9ed1d4
SSDEEP

1536:N9LkzeDN9MImEpT12Eoo+EKfK4xLieiTiak7u0doxu2fKdSOVLkzeDN9MImEpT1H:3L39MApJxdk7Oxu2iwOVL39MApJx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
911ee727788f24b830c76ecd2359da10_NEIKI

Files

911ee727788f24b830c76ecd2359da10_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Backup\Casimiro\Desktop\pw\Launcher PW\Launcher\WindowsApplication1\obj\Debug\Launcher PW.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ