36d0149f6cb80f5d4fc20be56f29cb80_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36d0149f6cb80f5d4fc20be56f29cb80_NEIKI
Size

392KB
MD5

36d0149f6cb80f5d4fc20be56f29cb80
SHA1

a1df7183452bc4d187883e924724968e23dc64e7
SHA256

6697bfcf28fba560f7fc6c401b5052bb5641b34fa03d9d3170128d84daa7c8e6
SHA512

0dca3fe58242f9decb2e9801e3f9af5e7cae504306c69b31bbe14d3e720dc08fc0df369ef42573f7f9c4837cc916d8803627734e8132e40e9ff7af7a9ed75c17
SSDEEP

6144:Oe0aJl4X9F81aCrCyBXC/uNoaLxR+RKV3ni8/rxrErnWgmxCpYO1thrMjC5lq:H0aJl4X9bCrpxtR3nNjx/0Zth6Gq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36d0149f6cb80f5d4fc20be56f29cb80_NEIKI

Files

36d0149f6cb80f5d4fc20be56f29cb80_NEIKI
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ