b563e14cb04eaddc23886cd33c33b7a0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b563e14cb04eaddc23886cd33c33b7a0_NEIKI
Size

18KB
MD5

b563e14cb04eaddc23886cd33c33b7a0
SHA1

e5f242f525849bc11b44545a94b4d20f9c0e519e
SHA256

101112da22130aae79e3f6a30a908f8c074c1471065a910e1c42c8bf36f69713
SHA512

bd9ca9b7a49045003861637f952fe34c95660ccc256c3668d4be1d88ee316213104da64117e3e3043ced2e051045adba2751d8776c85d4a61401bb597577fdb4
SSDEEP

384:X7nikI3QZmJq+VWqzNOORj/MIPPadqmijS39kCdEoMPrh/6pmhTHnJdeODbctjZ2:X7ikIfkqaMl/6wn63tjSRZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b563e14cb04eaddc23886cd33c33b7a0_NEIKI

Files

b563e14cb04eaddc23886cd33c33b7a0_NEIKI
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\esee\Desktop\ \KODLARIM\RSBot-2.9.4\Plugins\RSBot.Chat\obj\Debug\RSBot.Chat.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ