8172f577b57907ce94bb38b52fcc8900_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8172f577b57907ce94bb38b52fcc8900_NEIKI
Size

9.1MB
MD5

8172f577b57907ce94bb38b52fcc8900
SHA1

224588b4a8295b4682c16a7f62c82c9b0465a3d2
SHA256

def99d22d49325b4400ef087f985012edda22ec766a686196d478aef0cbfbfa7
SHA512

cbc3acc9eb5d91719dacd339dd43e98d2529fa04f4ed77dd11579c8fc64a3fa6bb33816782d4b8cae58610ba1b605dd153a6223b03469ef842bc926e1b559661
SSDEEP

196608:jIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIW:S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8172f577b57907ce94bb38b52fcc8900_NEIKI

Files

8172f577b57907ce94bb38b52fcc8900_NEIKI
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 7KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 11KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 24KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE