ba2bdcca0d4b92472b973657bed160e0_NEIKI | Triage

Sharing

General

Target

ba2bdcca0d4b92472b973657bed160e0_NEIKI
Size

110KB
MD5

ba2bdcca0d4b92472b973657bed160e0
SHA1

408910d0d6fd083536d4ee35c67b505ca337d097
SHA256

1a2956748274105138e2da8ca41b676a488fdd064b2c16f1259431dea79b0cbc
SHA512

9f4c88486915cb576d30f5c177f89230236ffe97f120f786e2770ad7bfbc80765e1dbcab04d7dd33d84f96caf4241f59484d3a7f08577daccd3ef40ac42146e1
SSDEEP

1536:rIWe+eoO6O2lpiMZiMjj0kDnkXn6R6aXkbxpj:5e+eoO6OaiMZiM+ksL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba2bdcca0d4b92472b973657bed160e0_NEIKI

Files

ba2bdcca0d4b92472b973657bed160e0_NEIKI
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ