007f4fa91ec8d071e8b28df293fa8890_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

007f4fa91ec8d071e8b28df293fa8890_NEIKI
Size

5KB
MD5

007f4fa91ec8d071e8b28df293fa8890
SHA1

369c20ebc3258fc2e117a8a4179bd40e86b20b0b
SHA256

ab4b0deba6a1da328e09d8a30e2937f78553da2ed24a9fd410c84158b9d590e5
SHA512

b62f040c900faa6d3a0c4c86c9c577a65497f05225ce2414ef696e4e904bca8229b80b616b7b16d772900fe3e97613f7fa6d36e78602877634384ab5ad06da8c
SSDEEP

48:6AmkOwohIVwdl1WuJ+GtrzEH9VDhQAC1MfBZWrTadlrODTj0FWSfbNtm:QkBGpaqnEdVDhQAC1EPWSdpODnkzNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
007f4fa91ec8d071e8b28df293fa8890_NEIKI

Files

007f4fa91ec8d071e8b28df293fa8890_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\TFS\Client\R3.1.0.0\Setup\Best Buy pc app Launcher\obj\Release\Best Buy pc app Launcher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ