17bc5f921a0b864e8164afe5acd3fe10_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17bc5f921a0b864e8164afe5acd3fe10_NEIKI
Size

1.9MB
MD5

17bc5f921a0b864e8164afe5acd3fe10
SHA1

bd5e6dc8b0288ab3247f2d50dbee5440fd264f5f
SHA256

8fc41e85156b4e333046c814e2bc9b37d5f29bb7e45f7bc52683ab09a332b24b
SHA512

4db3a519b3367badba007a50915ba2d56a6fdb58d8149e61bf0979a1d293a29a6fdedb295c2f683ba8db1c0ab787f345d0bb8039da285e0473051cfb93cf59a0
SSDEEP

24576:SFNOVxGWtuVlMHxifDuBOcJKEKKsIeHe4GgYHx5//yHfdaf+i3FdsZpFI8Z3Nd24:SFN+xGWobMk7uzofIEFhixxCaf+izsZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17bc5f921a0b864e8164afe5acd3fe10_NEIKI

Files

17bc5f921a0b864e8164afe5acd3fe10_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Programi\Spin\App\Blagajna2013\obj\Debug\BlagajnaDX.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ