b38e55914daecc76f0884419ed0ae030_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b38e55914daecc76f0884419ed0ae030_NEIKI
Size

100KB
MD5

b38e55914daecc76f0884419ed0ae030
SHA1

943e5576f2d93af99a14f9e03ed1a56f8694f33e
SHA256

dea0525c2051ca23ef6c115294f61be15003ef356b6c38c34c8c2b7bdcec9cc9
SHA512

0c5a9b886ba03bbf69423e4d0b75d299a35f339983dfa8e95240400abc5bd3d2981532b60ce2a221e7364685ecd91096a02aed585ade9111b979c91310876d55
SSDEEP

1536:d+CoY9d0PplZDGUHE2+aHoaaaHDB/Ug4ltxfg8xJXC6pD6v2arvOHK8j:db9urDFEnkD9oS8vojH8j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b38e55914daecc76f0884419ed0ae030_NEIKI

Files

b38e55914daecc76f0884419ed0ae030_NEIKI
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

.\Library\Bee\artifacts\1900b0aP.dag\Unity.VisualEffectGraph.Runtime.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ