5aceb0cf817d4218d983ef1ace10a810_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aceb0cf817d4218d983ef1ace10a810_NEIKI
Size

52KB
MD5

5aceb0cf817d4218d983ef1ace10a810
SHA1

df13aed1a1320b5e988e2f017021a927bba1a980
SHA256

6420ac8186089880ccae4f223701f8d2ba8c23025db9f94d81106f2c670fccc3
SHA512

52172edc7e721807b72a2ac02e1912d223776ab929a791a399a4464e6c6671cde1a36dcc4d6ebab0197838ae9a2e616681be5fa3a4e8a6103300fe980be5d473
SSDEEP

1536:SOBeEIjNrRv+4NUWfUEZ5i54qu6+Ed4CXL:jlIjNtvswUEZ5i54quZq4CXL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aceb0cf817d4218d983ef1ace10a810_NEIKI

Files

5aceb0cf817d4218d983ef1ace10a810_NEIKI
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\JiftDoc\WorkProject\OtherCrawler\ClawCommon\obj\Release\ClawCommon.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ