ngigii[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ngigii.exe
Size

904KB
MD5

615bc3f3c2b4c0d3de229f4f1baaf770
SHA1

9bc01742ab423959dd6ba37fe2aab1a47fe21e51
SHA256

38f3df61d56addd047792093f6bbe69d3827ab78e702ac535c304d94adc0a046
SHA512

b7d572fc8f412a9909f50bdad586a8e8c080222f2b00c91908b9799be6b9b3ce2e54e56342cbf8f9f3f47a5abb6a4ee486f060deb7b3b84aea56598b559bdf9b
SSDEEP

12288:xAkVZ8qlZkCG7M3sI4J6HYyCRuKTFuvTbCfCyB/I8M2Kw46kukaOnkv6/2e45i:ZVqq3ZG7yY6DCRZCewsKw4wkpU6/P45

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ngigii.exe

Files

ngigii.exe
.exe windows:4 windows x86 arch:x86

Password: ssss

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 897KB - Virtual size: 896KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ