baf1dde4778603f930547ca2ff8ae4c0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baf1dde4778603f930547ca2ff8ae4c0_NEIKI
Size

84KB
MD5

baf1dde4778603f930547ca2ff8ae4c0
SHA1

90c823f48d095996203cedbf445fd7bc1e89ca18
SHA256

57a9ecf1e3ec7f4888de39f7ed3aa39ffd6088a7399c913ef02a0b93828f97ea
SHA512

4d8c0c3c6ff54c68278df124dc9c523de82b581291d85518878f1f7371a1cb0c3a189cdf7f2a2a613c2ecab53823a77cb43ecad1cfdff020c330c60c4ad94f79
SSDEEP

1536:GQ1Tzy48untU8fgMEI3jPYfPiuO8VqCoiK2Aay:GazltUArsaSPov2AH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baf1dde4778603f930547ca2ff8ae4c0_NEIKI

Files

baf1dde4778603f930547ca2ff8ae4c0_NEIKI
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE