Behavioral task
behavioral1
Sample
4dd35f92e175bc0b2c1dba9e6a65fe70_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4dd35f92e175bc0b2c1dba9e6a65fe70_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
4dd35f92e175bc0b2c1dba9e6a65fe70_NEIKI
-
Size
2.5MB
-
MD5
4dd35f92e175bc0b2c1dba9e6a65fe70
-
SHA1
c48baf0de028f9d4919e9ab5b41aee79c42fc580
-
SHA256
c97647687c9e5a3fcf97f8379de35da99d17ab69cd19cc143a8ce24cd7076d5d
-
SHA512
6d21cd5ee7135cca5f0bd2b20e82aead5eea1bc95403f0bc090175f997d845c56d1e41a623624a584ad530ffd864dfbed94c3bdd8602337d155fc1b86a8d9ac8
-
SSDEEP
49152:u4sYA5APvJjKEDMiXKEHPle6bYuYaig+CcMyc20D++qx376m8pSwCygAU:u4XjPvJjVNXKCsMY5XAjSH377GnCygr
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4dd35f92e175bc0b2c1dba9e6a65fe70_NEIKI
Files
-
4dd35f92e175bc0b2c1dba9e6a65fe70_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 34KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 7B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ