49b2eb754a4869aae79546853d4d4560_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49b2eb754a4869aae79546853d4d4560_NEIKI
Size

920KB
MD5

49b2eb754a4869aae79546853d4d4560
SHA1

57c4d6fb243f5c8a3e40f2e5d11dc6c9913fe554
SHA256

da775e4fc0a99bc988146445303e472f6d91d07f8cdb39b12c29fc51a5f1b07d
SHA512

b546ca1b83a06fb57b1764c3159afae2f1ba3972ef0a1ed804de1ed9c5d30e5f87a4187f267a62cfe6dbea1f9fd2cb197572a5a7e4d8670e93dd873f7ab925e1
SSDEEP

12288:y8z/Ar47Q0oEyd3SXF3Vjt9VzWTB1TqdmSohzvD6KajwGGSYOiao9cVbdRjVgRDL:Xz97Q7z4F3Vjt81d5aFTY6bdvSa/ZS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49b2eb754a4869aae79546853d4d4560_NEIKI

Files

49b2eb754a4869aae79546853d4d4560_NEIKI
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 633KB - Virtual size: 632KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ