bf5eaa6d3bf568fea76942abad903b60_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf5eaa6d3bf568fea76942abad903b60_NEIKI
Size

98KB
MD5

bf5eaa6d3bf568fea76942abad903b60
SHA1

d41db5416a7bfeed22b19c1877557378052b99aa
SHA256

bd61ebb977088e346eaa7e431702f8ddadc32053333b424f9c5d52b01b8b4e28
SHA512

05ba702bacab012f067786e2865966c06ff6db5c7cda41f92bbf0cd188a84db8aef6274bf8f9b76e309b3c77e61ba812ecdf756e108596284cec7fade942d811
SSDEEP

3072:UF6u6yDbH4//UBig+KFDhU32GhNvDH11:w36d/UwgVc2GhNLV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf5eaa6d3bf568fea76942abad903b60_NEIKI

Files

bf5eaa6d3bf568fea76942abad903b60_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Marcin Gomulak\Documents\Visual Studio 2013\Projects\SerahToolkit_SharpGL\SerahToolkit_SharpGL\obj\x86\Debug\SerahToolkit_SharpGL.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ