aa1262753508149289beed96d5cd8e70_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa1262753508149289beed96d5cd8e70_NEIKI
Size

1.7MB
MD5

aa1262753508149289beed96d5cd8e70
SHA1

503f954575fe11a715ab38f083651360fc4d76d3
SHA256

49bc11a93ed49956762431c74bdf08d77bc8d399f8250fe7bb05193998cec941
SHA512

876a634fb27853cbb01b0bb101eb96a4cee7b97aa6eec9749d7a8c6fecd11b7088b4b8594acf34ebb1d5c1496b37c553bfcd0cd8021030997a2b55b4a54d3f7f
SSDEEP

384:wikteFlWuftoTUetSwH4HfXberN7i4Pz5uAuE+:wikhTUGB9uAuE+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa1262753508149289beed96d5cd8e70_NEIKI

Files

aa1262753508149289beed96d5cd8e70_NEIKI
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ