d783857d7ccf5bde8e241810de183a10_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d783857d7ccf5bde8e241810de183a10_NEIKI
Size

380KB
MD5

d783857d7ccf5bde8e241810de183a10
SHA1

038676f56283495eb9692cf0d654f019ccb8b90d
SHA256

0a533f5e4482b7c6424dbb6472fc3edbc4deda45a18129d51d41f374edb53c32
SHA512

70694469fb5b9f8cc197039e31b022ab674bc57f9cddc95994778cea5f065f47d9c5f31e44fc193b74f28aa1aaa32f59648dbe8ff9de056a3157f5f0feee1b73
SSDEEP

6144:1+MPI0VG3xhUQ3nynkS5p67xhtQAY3xEI0VG3:UmAXC0hBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d783857d7ccf5bde8e241810de183a10_NEIKI

Files

d783857d7ccf5bde8e241810de183a10_NEIKI
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Kodlar 2012\Vb Net\Büyükler\HesapVer\HesapVer\obj\x86\Debug\HesapVer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ