f4a807cc2fa7d62e1bb361251d83a1f0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4a807cc2fa7d62e1bb361251d83a1f0_NEIKI
Size

464KB
MD5

f4a807cc2fa7d62e1bb361251d83a1f0
SHA1

5af150a8a862e67b67d98fd1fd39beb27d5354e4
SHA256

977650fadd079307b403c79e2a0dd931ef517d1122db53f4ed278fa2f8f61957
SHA512

8377f1e4c9be789f5991b0e47ff7f0d651ee2439f8893dbb418b45c3d9cb69afd685c3f89d218f845e170894aeadab50bbd225f703db39479714011e583b87ee
SSDEEP

12288:yTlc87eqqV5e+wBV6O+69bSxAnfCd1BiAecNWj5r1f:yTSqqHeVBxdJAAnqFiDccj5hf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4a807cc2fa7d62e1bb361251d83a1f0_NEIKI

Files

f4a807cc2fa7d62e1bb361251d83a1f0_NEIKI
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ