00c75f08d717636751e39b45e6079120_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00c75f08d717636751e39b45e6079120_NEIKI
Size

48KB
MD5

00c75f08d717636751e39b45e6079120
SHA1

f862cd896b79b6ef96e854326c959eecdd83b1b4
SHA256

5e7fd528a5ed42affeba464ad1d1fe7a18175f8ef2bba29834df83e7085c8470
SHA512

75e8c0e4531ae58ac25517ea9eaa113d9572a85eb2a9cf9945924c6f8d0e6e330e6c60be9c5a56e2617d6519c0ab3a3030f0ab475c65da841c08c7643a8569ac
SSDEEP

768:LRwJzUdoHLk6RY7/GMfMWNpJNyIahqCGYOU:AQoHLw/f0WNpPkqCGQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00c75f08d717636751e39b45e6079120_NEIKI

Files

00c75f08d717636751e39b45e6079120_NEIKI
.dll windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

PresentationFontCache.pdb

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.extrel
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dbgmap
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.il
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ