08053661133e716adc44a864d5ee7f10_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08053661133e716adc44a864d5ee7f10_NEIKI
Size

1.1MB
MD5

08053661133e716adc44a864d5ee7f10
SHA1

830eee6aab6bc0acf46f5898c5155c06fb3a30e1
SHA256

33110e0919e12e1e0b30e5ec2fc28c67912409e1d2ecbc43743a67e452ae636b
SHA512

d150baba13afc049669501350cf8b25d09610a2bb870d4ba006a8b0c4a181fc853d3935edfa4c9a8c6034502064cf6eaa3828b27490c4bbacbd3ec6e3cfac689
SSDEEP

12288:m2w+lyfPDso8PT5vZaYeiveC8omNZHsyClgmw6zxV7QH35DMw2n/qIjtAhj53+/Z:flwgoA9w/r5H35DMw2n/qIjtAT3G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08053661133e716adc44a864d5ee7f10_NEIKI

Files

08053661133e716adc44a864d5ee7f10_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

p:\Target\x86\ship\setuptools\x-none\Flattener.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ