adf01c29ee345111aa24968bd2f27580_NEIKI | Triage

Sharing

General

Target

adf01c29ee345111aa24968bd2f27580_NEIKI
Size

607KB
MD5

adf01c29ee345111aa24968bd2f27580
SHA1

8669b2fff167d9a97ee50a8d17d1db5b500aae9c
SHA256

050ca79c9a63fe581b9348fffc2a6e10ded1885ce88ef9b4fdaa87c0d77aee24
SHA512

a2fd1bc05d7fb255b83ccbe19134274c102ee2852775b4c1e0d6892d5e5b8a41df67cf398fe5295e3a30b29a156975401d3c388aeab6b19b28ab37e6ed035d94
SSDEEP

12288:H8oyPjWhD/hTQJmmZP09pM/LE11dlqDUFGQvDPr:cohD/lQJp8zM/L6dgUFG2f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adf01c29ee345111aa24968bd2f27580_NEIKI

Files

adf01c29ee345111aa24968bd2f27580_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

NJt.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 604KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ