f6c091749569030e4892db519655d7a0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6c091749569030e4892db519655d7a0_NEIKI
Size

1.3MB
MD5

f6c091749569030e4892db519655d7a0
SHA1

343507219a3f9ed1f48696e4eba997e00ae91045
SHA256

f07fc473212980097de7673e5fa4dae0b8c5fd2b714b47398699373f26852bab
SHA512

008fda44eefaba209dbefd5d14a6e79aa4873c8be049beda90a9e85977f47d6a221a91aadc66f5cabcbd496e46ebe04a2f7e8263afbf45a2769b899710ab0be5
SSDEEP

12288:xHCYFiQjrecvwWYUIsPWgoHX24Z9n43qR4xH0g4VtPljCNcPjoU4AHB/0pXcsgO1:sWYUIyWg8TZ92qjPh+cPj74MB/3N7O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6c091749569030e4892db519655d7a0_NEIKI

Files

f6c091749569030e4892db519655d7a0_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\WPF_Projects_2020\Projects3.0\TUKCompaniesDataMining\TUKCompaniesDataMining\obj\Debug\TUKCompaniesDataMining.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ