1dcfa9784cf1d0c76bdabd450244cb00_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1dcfa9784cf1d0c76bdabd450244cb00_NEIKI
Size

143KB
MD5

1dcfa9784cf1d0c76bdabd450244cb00
SHA1

ed1b11720014b72dec5288e4201504a413fb37a9
SHA256

cc65d77ae2e28c423899189470b960fe37b87fe267a336d2534d98e9d8da16e8
SHA512

9138523de45ba181d5a78ff2346c197072fbc36247e3357ea7f49e926c605906877282bd38cf2c630fa63be21e51f67c688ebdcbba15545119f899903f52345b
SSDEEP

3072:4bzmQy+V4OLFF9SjUjj/T5QKl+6yLGXS8by+eHzi8s39fNm09uI:McB6JcZz3vHzif1b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dcfa9784cf1d0c76bdabd450244cb00_NEIKI

Files

1dcfa9784cf1d0c76bdabd450244cb00_NEIKI
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DajMinMaxSF
DajParamF
GetPageProc
IsProcZus
MalujSF
SetPolaFormul
ZerujDruk

Sections

CODE
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ