ec7d3ce281eefe3372efeb840896bf80_NEIKI | Triage

Sharing

General

Target

ec7d3ce281eefe3372efeb840896bf80_NEIKI
Size

196KB
MD5

ec7d3ce281eefe3372efeb840896bf80
SHA1

d4968407be7b2922f381f3ac5c8612754cbde3de
SHA256

0a6d7161d587a330ce9d4773fd92dd78705dee88519b3a90843b2b8b879e8b0a
SHA512

6b51b9d47bb919f12f2a47d89a7df1f055063a236e0ab74b780ffd8e7883a17aeb466fed2b0a496d91387d47f5c27b0ebb06dad84bddb80fb86c95a190ef48a0
SSDEEP

3072:UMV/O+5Gwgk9qtzl3DpHi5SE1t/bQzd/u/K1kP4VRaNA66j:UMV55Gwgk4U5So/smi1kP4VRID

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec7d3ce281eefe3372efeb840896bf80_NEIKI

Files

ec7d3ce281eefe3372efeb840896bf80_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\Programming\c#\GuildOfHonor\WindLand\GuildOfHonor\obj\x86\Release\WindLand.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ