502827e6b36580c97799b6bab8fe76f0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

502827e6b36580c97799b6bab8fe76f0_NEIKI
Size

21KB
MD5

502827e6b36580c97799b6bab8fe76f0
SHA1

e5db58cddfc0b94f295a2cd7b9b0d8f6baeaf04d
SHA256

e25b904e9aa831a2ce9bdcb8366be43a22773012df74d43d31baa5350a8c4b0a
SHA512

816602a2c167fb09fb212122cf9e2d0e92606bebd9cb45fd49258934b6565dbd55d5229cafefdf3ceaf317f7a262005d471e310c8bb88a68aaefd43f206f9402
SSDEEP

384:8hUCMXryAPbrWObMTHZwxlUgzaljyt63KhR9t4rvr22XwsRvlixirxc1Y8fffLU2:ICroBHZS/z0yth63lixitnNUpI4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
502827e6b36580c97799b6bab8fe76f0_NEIKI

Files

502827e6b36580c97799b6bab8fe76f0_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\HEIZERE\Documents\Visual Studio 2015\Projects\IdentifyReadsMulti\ConcordanceCheck\obj\Debug\ConcordanceCheck.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ