c5afd60fa72a27534506ceb7e61adf10_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5afd60fa72a27534506ceb7e61adf10_NEIKI
Size

47KB
MD5

c5afd60fa72a27534506ceb7e61adf10
SHA1

95ad524d3e86e4ebd1f2d2d616ce3d73224eadbd
SHA256

369fd54f476be2c7440f14423116221371c8de3d52d40fc9b69a6006a18306e4
SHA512

fcf2579ea00741139c9e15f9397b82df876876e3f2478c7b47e99f8e0b82d93ced82f64bf2c746177f4555d2e5c11943aa254ddee71f0a83acd48978a931a90d
SSDEEP

384:rkRJUlvLnJPcJTuztenF/cuy8nEzOdP8YDSsqYfA4DsplkiIHl5ji8ng0OMHNUw4:sJe7JquJenFsOdfN5spTscMa7Ej7FTO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5afd60fa72a27534506ceb7e61adf10_NEIKI

Files

c5afd60fa72a27534506ceb7e61adf10_NEIKI
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

App_Web_5nrw0pgw.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ