e91c50aaf58858ecef59e4bd0d6073d0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e91c50aaf58858ecef59e4bd0d6073d0_NEIKI
Size

127KB
MD5

e91c50aaf58858ecef59e4bd0d6073d0
SHA1

35ff7ac00c10e388cddd9af3ccb9170cddb64769
SHA256

839668dee61969f1ea1ae190446fbac853960aab781b4f3512847fbc1d7ffba9
SHA512

0f1964c2ac7630b17ba1492352901eb5a0af40ebfe4c85e030a73389f9b637185050087b66cb44f4432efc1cdea35e1462a89529dc18dea1ddfa556448c2450e
SSDEEP

1536:anvAl6lQ6kG6JUkMMOY4FycC2zNZy+DjGYwrWtpbFY63bw6UA9AaDS0ql:anva6khJUJ/Y4Fycb5Zy+DK4tYWxbNK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e91c50aaf58858ecef59e4bd0d6073d0_NEIKI

Files

e91c50aaf58858ecef59e4bd0d6073d0_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Manuel\Documents\Repositorios\SIM\SIM\obj\Debug\SIM.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ