Static task
static1
Behavioral task
behavioral1
Sample
4b44c479de8dad07baf5207e5d9a01c0_NEIKI.exe
Resource
win7-20240215-en
General
-
Target
4b44c479de8dad07baf5207e5d9a01c0_NEIKI
-
Size
992KB
-
MD5
4b44c479de8dad07baf5207e5d9a01c0
-
SHA1
772bef79b5e77ad83b32fa8f125d5ff337ed1ae8
-
SHA256
132ebf234c6cc6128359758a4ea7f976652eaa03ea651a84a5ece01eaaed9c90
-
SHA512
962515165e5935bee3a5e6584f6d448014724bb67d657bde4937a17d407a230c7deb2754e2f7958479db5dc406b4fa3d2c4a50b6013dee41423e030ef92fc71b
-
SSDEEP
24576:JXB3lMp1xNE/OlTLuCvqM3aNLBXr2aXg8O:tFgE/OZCCC86LpC6g8O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b44c479de8dad07baf5207e5d9a01c0_NEIKI
Files
-
4b44c479de8dad07baf5207e5d9a01c0_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 784KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ