273892f3f3e0d855c5ef9bed867d5b20_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

273892f3f3e0d855c5ef9bed867d5b20_NEIKI
Size

540KB
MD5

273892f3f3e0d855c5ef9bed867d5b20
SHA1

357602f2c070148dc904538405b54dbc87180c51
SHA256

f6f215faf2ad35c13a18782c3d63c3feec1cb1884eb7d1d5ba02cbdc143d0ff3
SHA512

d145a6ad841f057539cf5b704cc0a34267969d54ec6439b2f1595af206aa562f6e5a745fc24f365cfb837f375339a0e9f47b1761d9289cf6f66116c00f021ee3
SSDEEP

12288:baI6wRzhln2r6NrYjkCDL+H10U3wOiucW:baI6wRzzn2r6VmSVR3wOiuc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
273892f3f3e0d855c5ef9bed867d5b20_NEIKI

Files

273892f3f3e0d855c5ef9bed867d5b20_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 500KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ