cf30b9af43022e604195135de593ae20_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf30b9af43022e604195135de593ae20_NEIKI
Size

119KB
MD5

cf30b9af43022e604195135de593ae20
SHA1

9a2a8c7b912452702f24f2f3ca83d72a9f4ab8ab
SHA256

c339e68f599fae9d45ba20fcc029b95196769852a2946427d31596ee6d00a289
SHA512

c5abc049231db3d3db3a3b0a10dcf867691382d17617547915dd6c8393ae8e3563b199ce1bb005849e742598d98b85c74ee565857f234d5d3bf029e07b8e44f8
SSDEEP

3072:DjL5IFHWOjMabTdbwf+SiNUO+NGfOBFr4kUGNuzC8MV4A:DjL5O2zbi7qpFTQOV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf30b9af43022e604195135de593ae20_NEIKI

Files

cf30b9af43022e604195135de593ae20_NEIKI
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 244KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: - Virtual size: 16KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 128KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 16.7MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 117KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ