d3d41c2d8c5fc7163eb3d6b3145e5c40_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d3d41c2d8c5fc7163eb3d6b3145e5c40_NEIKI
Size

28KB
MD5

d3d41c2d8c5fc7163eb3d6b3145e5c40
SHA1

47477843faa14423e5958771b21304dd1272c881
SHA256

24dabb7f1fcc81583abfdbf3bfdbb0b35dc8ea283e3361062e2d4103a99a3cf1
SHA512

7d2e2aa4730a2d97b230615307dba6fc51f074e91dfedb4f940efc030b8fe8867798dfab06607e32be43786b86b65aefd87ba575aac65402f0b39ab3054a5fe1
SSDEEP

192:B2W9W6EGRsXWV8ozjR9IQ0L33InYVcV5GKGm2IWw+YALGkqPx0R4pROzb47f:jEsT2neDGTm2H7Ypkqp0CKPgf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3d41c2d8c5fc7163eb3d6b3145e5c40_NEIKI

Files

d3d41c2d8c5fc7163eb3d6b3145e5c40_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Constantin\svn\branches\kassa24\MSSQLite\obj\Release\MSSQLite.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ