1586b61af26678ff806e19e37e376bf0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1586b61af26678ff806e19e37e376bf0_NEIKI
Size

1.1MB
MD5

1586b61af26678ff806e19e37e376bf0
SHA1

9a88ba5f2e6dd2b1b06f24454635f4f38c87e10f
SHA256

981634c9b534ca6fa9e899bf0c09060f1d6b3a88e39faa4842fa26d5a7b2c8b8
SHA512

c46996832cd61f795ff54a786345ce2857c09683cace990c32f693a458d4758644b807ce32fbbde9a69d018efe50f6545ab560d53476cedb25c683d5632150f4
SSDEEP

12288:gOOYiLcBHI4PqOOYiLcibjWaC1T6tjeMyvV6MjOOYiLc:gtdL6itdLBjC1Oyd6UtdL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1586b61af26678ff806e19e37e376bf0_NEIKI

Files

1586b61af26678ff806e19e37e376bf0_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\eMetro_utvikling\Toolbox\Toolbox\obj\x86\Release\Toolbox.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 995KB - Virtual size: 995KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ