d031f02bd86477368d1f70d970ed5460_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d031f02bd86477368d1f70d970ed5460_NEIKI
Size

786KB
MD5

d031f02bd86477368d1f70d970ed5460
SHA1

f11f108251827b1665150f5f0447a7eaee5aecc2
SHA256

5592700de38987a85a334014bc410b0b1581e5806802bb132118f670e18605e9
SHA512

c15da9fae564cce1ca7333989aa028664d11704f33f0ad043664eeb3a98c30d6a9dd770c992e3521ad0f09030b564887a3983a35e296edca528c4bd0684dba0c
SSDEEP

12288:jElPpB4eSnEWZwXoU6t5+5XBFQ3mw4MhZRmYQSjtYnq/bQrTQvXKjiPO:EBuLdw4nt5+5XE3pP4q/MrU/Km

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d031f02bd86477368d1f70d970ed5460_NEIKI

Files

d031f02bd86477368d1f70d970ed5460_NEIKI
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ