81baece476744fd67ff80feb9db19040_NEIKI | Triage

Sharing

General

Target

81baece476744fd67ff80feb9db19040_NEIKI
Size

492KB
MD5

81baece476744fd67ff80feb9db19040
SHA1

086b919610dbd5b2c7e5d169e9de7de9b01d62ee
SHA256

c327d6198a5415c920aec19b6e1714f7b442bdc88b9528cfa13cc9167280f007
SHA512

de996f97c9d3b79552cdaf4bbd823af8caaeb9c584cf3017692ca47c60036216b8835d382e5ddb8d07a57f4ac8b98ef9f8cf43ec3249e99af6218bfd6ec74fd5
SSDEEP

12288:7a0LAiEAu8xvdTIV+LGzngT8mjjmUoeo/:7amxzxuMCrVmjjk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81baece476744fd67ff80feb9db19040_NEIKI

Files

81baece476744fd67ff80feb9db19040_NEIKI
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 405KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ