828161d78eeec4bca2514093ffa8bfb0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

828161d78eeec4bca2514093ffa8bfb0_NEIKI
Size

515KB
MD5

828161d78eeec4bca2514093ffa8bfb0
SHA1

1d5d0bc971e15d753d5897e071d12b76077a16d3
SHA256

38afc002b8f8404d49135fbcddff37712ac9e9766e5f2a1662dc61f709f47c7e
SHA512

42959ef55bd83515c244d0af333d42fdba8235e13203b806e8f7b071c7df2ffc186004fb27e762f784c46b237df89c6abd45139d8530dc87628566bb84a46109
SSDEEP

6144:JFkEkNrxG7GN9qDaiMKYVh4o8O2KwrlBEb7RPJ:/kE5GNjUWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
828161d78eeec4bca2514093ffa8bfb0_NEIKI

Files

828161d78eeec4bca2514093ffa8bfb0_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Web\eFinanceProjetos2012\WebServices\Transicao\obj\Debug\Transicao.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ