353f772a482139692476a7262e5743a0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

353f772a482139692476a7262e5743a0_NEIKI
Size

12KB
MD5

353f772a482139692476a7262e5743a0
SHA1

48445d696d34930fb2e524c9e65abae0b5563b96
SHA256

4b2babfea5cd23b60e8ed5f0b5f528c5d39ee46718a103d05e07acc954ba15f4
SHA512

c1c3649eed63cb8533a148380ba5a0c6b28c84f113236c72426154c1981b74857fec34f5eb704e684953051242306e255a9a50b1c2b87768f235ac415154447f
SSDEEP

384:nL7li/2zNq2DcEBvdfcJKLTp/NK9xakC:LFDZQ9ckC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
353f772a482139692476a7262e5743a0_NEIKI

Files

353f772a482139692476a7262e5743a0_NEIKI
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ