3104d6797d49d2c687e0ae7a7fb5c6c0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3104d6797d49d2c687e0ae7a7fb5c6c0_NEIKI
Size

769KB
MD5

3104d6797d49d2c687e0ae7a7fb5c6c0
SHA1

9d44cd982f9dd52ce390f49b8b80457edaf0b5c3
SHA256

2b0fdcabc1b3cc7b8cc6bbd37430d239ede3e7e8a646ebc903714f24ac268095
SHA512

6c079c6813f4e17e0515dc831fb252f8c3c6e2a78ef2fa67adb78f6d011d09352e3fb7b013052854b6b5bc8114f23694f8b61e88fbce77c274e2250124348486
SSDEEP

12288:DqcQv2vaDenkTUvfTDEercLyyxQf8W7HyFLAcfbSvp7lmV6ZF:DqoVnuUv3vqDpuSFMrvzmV6ZF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3104d6797d49d2c687e0ae7a7fb5c6c0_NEIKI

Files

3104d6797d49d2c687e0ae7a7fb5c6c0_NEIKI
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 514KB - Virtual size: 513KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ