347a0c3af5a5aaeb7ffa1b932fbdcdb0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

347a0c3af5a5aaeb7ffa1b932fbdcdb0_NEIKI
Size

190KB
MD5

347a0c3af5a5aaeb7ffa1b932fbdcdb0
SHA1

fe1b2e40e09ec1dcc5d244204ba288a2ee8cbb73
SHA256

4c0769b67cd965abf8d452b4961097da5fc104483c17fe68262c08add7c2bc10
SHA512

1df226bc82b6d8ae18dcf7b4fccfd38df8232fab0fc620762317a487c71fa0ef60aa122c681da45b8ac90142fbbac5bcab9b27666e14c3edb6bf8be2e98cdd3a
SSDEEP

384:E0GRKkFyeItGRKkFyeIZ2mmCgx+cLsaCgx+cLswPNPNM4HkS6FSSTFxp9O+mJCtp:qKVeIuKVeIaCgx+qsaCgx+qswPNPMtfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
347a0c3af5a5aaeb7ffa1b932fbdcdb0_NEIKI

Files

347a0c3af5a5aaeb7ffa1b932fbdcdb0_NEIKI
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ