a0fe40d337bc037a741eaef84d193440_NEIKI

Sharing

Copy URL Twitter E-mail

General

Target
a0fe40d337bc037a741eaef84d193440_NEIKI
Size 781KB
Sample240508-n9hycsbf4y
SHA256 920c021801646daefdb66ef82d124b3545363597f744edc036fa7f589ef8a3aa
MD5 a0fe40d337bc037a741eaef84d193440
SHA1 ec98fd89c6d97ec48074d29fd6591e9fc506e7f9
SHA512 1398fb8e9c600e9344d86d1a24ce44232d68f60d08f1338923b1e26d635907b3da3321c3fe02ae07f44de45712bd50e776b0db29cec7e2dcb318c25302499d50
SSDEEP 12288:tT+WNwgW1Q7tRGq4qwBD9ANiZVD14KiBI4njSgRAeKJLZmG19anY:tTEgcGazRD9ANiDD1henHkLZmG19anY
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0fe40d337bc037a741eaef84d193440_NEIKI

File Explorer

a0fe40d337bc037a741eaef84d193440_NEIKI

.exe 781KB

a0fe40d337bc037a741eaef84d193440_NEIKI

SHA256 920c021801646daefdb66ef82d124b3545363597f744edc036fa7f589ef8a3aa
MD5 a0fe40d337bc037a741eaef84d193440
SHA1 ec98fd89c6d97ec48074d29fd6591e9fc506e7f9
SHA512 1398fb8e9c600e9344d86d1a24ce44232d68f60d08f1338923b1e26d635907b3da3321c3fe02ae07f44de45712bd50e776b0db29cec7e2dcb318c25302499d50
SSDEEP 12288:tT+WNwgW1Q7tRGq4qwBD9ANiZVD14KiBI4njSgRAeKJLZmG19anY:tTEgcGazRD9ANiDD1henHkLZmG19anY
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

11791

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

46KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.text

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

440KB

Virtual Size

448KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

171KB

Virtual Size

171KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rdata

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

DATA

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a0fe40d337bc037a741eaef84d193440_NEIKI

generic