Static task
static1
Behavioral task
behavioral1
Sample
NIKO- 1.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
NIKO- 1.exe
Resource
win10v2004-20230220-en
General
-
Target
NIKO- 1.exe
-
Size
362KB
-
MD5
71c3c2290d58e9c347c72d4813f8b57d
-
SHA1
a52f38a0b2e3c44d67782fdd84db42452eeb6199
-
SHA256
d13845745df696b66dc03ab4ab20ef668b8124a41dfe1e0f7e3ab721296cee99
-
SHA512
0537d3407f772ca309fd4652e02d0a7e89837818286deb90d65e1dff87f24cc54b71fe39c1a4c94da32bec30c94a63f36245492c6dca2a44caed6a23705818f3
-
SSDEEP
6144:F8wPrsj63Y7F1H4TKnjBrBEGBl0gUqwCCpg6xbIDusLOsmcsB:HU6oBl4+jVBEGBl0jXpg6xbIDuwO1r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NIKO- 1.exe
Files
-
NIKO- 1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 359KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ