b3da93caec9b25bf0d76fa7363c90040_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3da93caec9b25bf0d76fa7363c90040_NEIKI
Size

541KB
MD5

b3da93caec9b25bf0d76fa7363c90040
SHA1

1df40b9826a126480d63b1c53817e66de71e66ef
SHA256

f85963d124d731cb7c76b87219ba31bc56fdc3a9c081aaa4bdf38ba85ba9aaed
SHA512

d52ce7e645297485995daef828ab6791d4edda6900c9208f4b23fe8f72f3f41bcc40a841ad2c9e29bc9d08ad29c56e62341907f1c76e50b7595ee3feff2112a9
SSDEEP

12288:0oUg2twzqWC4kBNv1pMByWk6TYnhCevOEH07OqHM65BaFBuY3K:0oUg2tJWC44WUuY3K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3da93caec9b25bf0d76fa7363c90040_NEIKI

Files

b3da93caec9b25bf0d76fa7363c90040_NEIKI
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 518KB - Virtual size: 518KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ