94a905ba62cf0c0e17d06789bf828d20_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94a905ba62cf0c0e17d06789bf828d20_NEIKI
Size

113KB
MD5

94a905ba62cf0c0e17d06789bf828d20
SHA1

1182010e091fc43db43898a3d0f58175412f745c
SHA256

40f9d58b6ee9ebb18dd4e75a322a9c8d97ae1d9ec34c67773f62c184d258834e
SHA512

7f6e896aafc84234fc0d52fd5f8d00cf109b3b07d333d699491246cec3113ab05ce1d61f2dc664cd4969afdda67b7ff37f59594bebb7fd2cf8b006b23bbf0914
SSDEEP

3072:KyKoIWbsHfySkT5GeCyi348oWGRPOzkjId6q8UdrSD+kCoIfL2YwqAFZwI48c7yy:4FPxPke+eIa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94a905ba62cf0c0e17d06789bf828d20_NEIKI

Files

94a905ba62cf0c0e17d06789bf828d20_NEIKI
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ