Static task
static1
Behavioral task
behavioral1
Sample
3ef2fa85235cb6f8a8278543f9089e20_NEIKI.exe
Resource
win7-20240221-en
General
-
Target
3ef2fa85235cb6f8a8278543f9089e20_NEIKI
-
Size
65KB
-
MD5
3ef2fa85235cb6f8a8278543f9089e20
-
SHA1
c86eed37c53f64b049b6a97b8be6e41f3867510b
-
SHA256
01dc9c7e5a110e72f95fbe5df43681f8868b4efb83fd5fd9aff08bbd30aa17ad
-
SHA512
fdba10e7e7d6ecdc7f2a620c674b3b61fed4622e203c96077b8bedde1a2e6f8e830f0cd1924ea6f84773c0c95b86f1d087721ac3cc4945740d9ee52ad40faf11
-
SSDEEP
1536:CZLvGOmwVVoLCXe+mLBpeLswVWHd465GOW3u6Gn:CPmeoWXiLBe3N6Qin
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ef2fa85235cb6f8a8278543f9089e20_NEIKI
Files
-
3ef2fa85235cb6f8a8278543f9089e20_NEIKI.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE