331350fa366441007e4628ec60371c50_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

331350fa366441007e4628ec60371c50_NEIKI
Size

4.0MB
MD5

331350fa366441007e4628ec60371c50
SHA1

9716dc6d3bc44fb552f27681791e16a5bfd52f72
SHA256

1741d5428d3562a0af1fc735a3abf71e799b3e5628b03c608d032dfdafa9d4ff
SHA512

81491677cae5b8663f9954e09a99ac2d6550655b8aba85de462c718fd575bbb724454de8db886ab72138a0c8f7282ee861134ac27bd3f0e601d1e4ff93970f24
SSDEEP

98304:XdL9xWLs1Esvx3VRy2XOwnqoQyVHXoblgL74+7e:NzwM5S2X9qM3oqLU+7e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
331350fa366441007e4628ec60371c50_NEIKI

Files

331350fa366441007e4628ec60371c50_NEIKI
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 195KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ