d158e153463bfdccb7379ca75df95ea0_NEIKI | Triage

Sharing

General

Target

d158e153463bfdccb7379ca75df95ea0_NEIKI
Size

5.1MB
MD5

d158e153463bfdccb7379ca75df95ea0
SHA1

fc147c4c03a88ba989812b98b9fc385da8cd1fbd
SHA256

e3338f7c0133a57a2ea4e3c9efb1e9f9c1ef44ba98fd73114f48f3704c607e2c
SHA512

b3389767aeef913c50305c7673905afd9c58f9f1b2b7731f5680b5492d4bc898b3811ca0fded6cefe35fceb89d5e04054da141b04c24ec7417da617721355cb5
SSDEEP

98304:emipksqHmag0hfiKa9UuzAF3OsA049Ri8UHqKTLRdFa3k2ok:emTBmaBhfi5auzAF60EIcytdFa3k2ok

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d158e153463bfdccb7379ca75df95ea0_NEIKI

Files

d158e153463bfdccb7379ca75df95ea0_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ