fd77e10ed0ca4bb9ebd5b5c0d37aa7f0_NEIKI | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd77e10ed0ca4bb9ebd5b5c0d37aa7f0_NEIKI
Size

2.8MB
MD5

fd77e10ed0ca4bb9ebd5b5c0d37aa7f0
SHA1

723bfa1954c147ee4a2c817d3117cc3a3069a0c8
SHA256

e465226dd73ff09327b651f286e41eb2579a80b154c8b68c4d69d137095c7ebc
SHA512

52bcba694c7917ed96edca0b597752c9e15bbadd978bf97a44690345fc43d8703430e1e62e159b113760adb126fc1b3dc224866745144414d8d46fc33c4c6a84
SSDEEP

49152:bzMw4UaVb9ffyNu5OLFMDEQNxlXfc52aqKCC+lLEzC4Uitz2v5a/Y6IG:bR4UaN9XyKDEQflXfI/v+lLExO5S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd77e10ed0ca4bb9ebd5b5c0d37aa7f0_NEIKI

Files

fd77e10ed0ca4bb9ebd5b5c0d37aa7f0_NEIKI
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 231KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

JCLDEBUG
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ