ec594551ed66768660a4def8641f4430_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec594551ed66768660a4def8641f4430_NEIKI
Size

3.1MB
MD5

ec594551ed66768660a4def8641f4430
SHA1

effb6bba132db85415d6ab7127b907ab82075086
SHA256

e5d44acf61322da091ace261550f8c88ecfdb8eebc8d65c52847ded46d08652f
SHA512

6f76fec9889c1f5bf3148a2c3d2d9d7ab08cb9d4220522fa9b4f8b57dbcaa656e60347a5bd2d7f3fb1810b26dcbb9a1e97fbb4e31d21893b983781e66d100a1c
SSDEEP

98304:iBZJQ+FP/tG4hXsPSRKchn/ssFzPI9UL:xmw2DRBn/sILI9U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec594551ed66768660a4def8641f4430_NEIKI

Files

ec594551ed66768660a4def8641f4430_NEIKI
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.JfD
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.?a1
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ