bdc2b7a5232a2d50e219afcf5c024d80_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdc2b7a5232a2d50e219afcf5c024d80_NEIKI
Size

15KB
MD5

bdc2b7a5232a2d50e219afcf5c024d80
SHA1

dcbe63fe68a6dc5ed7f6606e4c6e1cbd7065341e
SHA256

19a810358e23f08dd26244f4617f8506583b1de4c3a411a7c63f40e1d2105b48
SHA512

0ef955f0ae3c996101a697e6f2961148d1c80e461f986aa466f247e6dba51fdc5d93bf377ec5570ffbe19356060c7afdc60c0925d91c80b09719cc8c6d7dc767
SSDEEP

384:Ux7Pwk8HjgLDEgrKIPWXUI6gz7BUZ3YcUbHy:qrDEgr7i5U5YcoS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bdc2b7a5232a2d50e219afcf5c024d80_NEIKI

Files

bdc2b7a5232a2d50e219afcf5c024d80_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Work\Sources\Official Tools\SrCleaner\SrCleaner\obj\x86\Debug\SrCleaner.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ