2947e671371efb34f017f8ee8fb7bd30_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2947e671371efb34f017f8ee8fb7bd30_NEIKI
Size

907KB
MD5

2947e671371efb34f017f8ee8fb7bd30
SHA1

763ea7ac0169a88846db67201830331a3646c8fd
SHA256

b5d80e523a7adb8bcba5230a8edd0bb3e5695ab64f346444242ea889fcc50029
SHA512

79e64f9f2b9a3a76aa96fc5ace70a06afac74c794b69903136306b69dac8e5aea5824707f7f138827189e3d1c47f23d35821e8aef633c55f8ca5aa3a4cf8b792
SSDEEP

12288:xtZqxzvUau8vUaz85bM3npxYfj63hgD1Zif:FCMau8Maf3npi63iM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2947e671371efb34f017f8ee8fb7bd30_NEIKI

Files

2947e671371efb34f017f8ee8fb7bd30_NEIKI
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ