c2c4c63f43481e256d109ccc9d09fc50_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2c4c63f43481e256d109ccc9d09fc50_NEIKI
Size

464KB
MD5

c2c4c63f43481e256d109ccc9d09fc50
SHA1

02c48c404d554ba5db6a423cb3df61b4f8914fba
SHA256

b30cb402130536469af18ccf3c37a80885191f92ede7bbab4093f12234c2769b
SHA512

b1024032ea186853e95e682ede9f8e074255c312addae38b81098a9dbdff7ad036bc624a2bab5d7814db7565db87e2ffa5d3b0e7a89ec2272d5bc00e9d2840e2
SSDEEP

12288:9Ulc87eqqV5e+wBV6O+4rFXXBsrxxNg1EV:9USqqHeVBxHrFXXBsVxNgU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2c4c63f43481e256d109ccc9d09fc50_NEIKI

Files

c2c4c63f43481e256d109ccc9d09fc50_NEIKI
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ