7d5277108632d9a6a5743fbe23c72bf0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7d5277108632d9a6a5743fbe23c72bf0_NEIKI
Size

222KB
MD5

7d5277108632d9a6a5743fbe23c72bf0
SHA1

68e83da1139d422c720bedf5dfe5178da3cf6d80
SHA256

891eaa71336810b6bc83446ef1da3167c6ccff9d28f3148bc8d1d9cd2bc82612
SHA512

eef24880241d003d64a054547e1a6d5a9dcce082b79cf113b8beb236691ec85d23655f89f4f13fe8936ae620302fb385ace712f216e2d906f8caa8621a802fab
SSDEEP

768:esQWXz9UFUvq9bNHnia+kYqkcZRwhuUFUvq9bNv:esQWpqUvKHnZ+kDkuqUvKv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7d5277108632d9a6a5743fbe23c72bf0_NEIKI

Files

7d5277108632d9a6a5743fbe23c72bf0_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Lee\Documents\Visual Studio 2013\Projects\PPPwn\PPPwn\obj\Debug\PPPwn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ