a6ed832f2d69cfd044073552496b5960_NEIKI | Triage

Sharing

General

Target

a6ed832f2d69cfd044073552496b5960_NEIKI
Size

90KB
MD5

a6ed832f2d69cfd044073552496b5960
SHA1

ef84a0d75a078c25058fd180a3720527556cc610
SHA256

f1821292c3a4815bd41c2dad022ef946d9e5eaf5579bae068ac89b0dafc375df
SHA512

fd8e26e3fcd14fd512a845fdc28cb08ccc1104bf33feae59fea944563dbcef06546648f6e143ec02bb190231cfebfdee7bbeb85e2e2e16a5c53627814d5e803f
SSDEEP

1536:uDtruK6996/e+vnD4Sl1mbZLNQWXv9OU1ubfOffHnsQcufzTJ2+mYB9IiLH:uDt6ZubkSlsbZ5XXvMUEAfnvLTJ2+mY7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6ed832f2d69cfd044073552496b5960_NEIKI

Files

a6ed832f2d69cfd044073552496b5960_NEIKI
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/home/runner/work/xvdtool/xvdtool/LibXboxOne/obj/Release/netstandard2.1/LibXboxOne.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ