dfc1d7cf8d79b9d0cf84d9e1ffdc4530_NEIKI | Triage

Sharing

General

Target

dfc1d7cf8d79b9d0cf84d9e1ffdc4530_NEIKI
Size

4.9MB
MD5

dfc1d7cf8d79b9d0cf84d9e1ffdc4530
SHA1

d0bf261762c87dcbba86aa47b9d11a0bb9a5f41b
SHA256

1c035c7ab20c82f6d9d13d21f279da1f839e0db600bd8935524466f4c0591037
SHA512

0bef9d680a83d0c2cb440c27955a4441eb11a2584abaf58a040fc5bbb6ad95d6d05b7f53046f9c7a6759c9751900b4ea3ef291a370ff76a200844af08775d919
SSDEEP

98304:YKIkiKIkdd/yzt67OU7apyKIkdd/yzt67OU7apyKIkd:8PYazg7DSmYazg7DSmq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfc1d7cf8d79b9d0cf84d9e1ffdc4530_NEIKI

Files

dfc1d7cf8d79b9d0cf84d9e1ffdc4530_NEIKI
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ