67e15427999b4c771663b8d542669390_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67e15427999b4c771663b8d542669390_NEIKI
Size

6KB
MD5

67e15427999b4c771663b8d542669390
SHA1

a98e7bbdb4f1f0233d77de613d372e07c7c6459c
SHA256

a6c9ef77638fcf36746fa6bce6db6ec5a974b45fefc333c88d12fc3366680ca6
SHA512

3af5f00b2aa1849d24267f84ec63f987aa09240311c5b85f6d9b9afc78b4caa98455a672ba2400331734cb0402e7f7cad80412fe5f7de7b54dd83af5202d4217
SSDEEP

96:WbyzqrqgthDcfHbhSg1EzSnPpG2pMIv9u4:qRqgthwfHbggSzSnhGIMI/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67e15427999b4c771663b8d542669390_NEIKI

Files

67e15427999b4c771663b8d542669390_NEIKI
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\root\6df15ae1\43e6c1e2\App_Web_log.aspx.47acc144.qpqcw0m5.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ