Static task
static1
Behavioral task
behavioral1
Sample
447304eb8b62dc838c118df58a3081f0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
447304eb8b62dc838c118df58a3081f0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
447304eb8b62dc838c118df58a3081f0_NEIKI
-
Size
14KB
-
MD5
447304eb8b62dc838c118df58a3081f0
-
SHA1
1df5c1119272f17f86a4fc217e62eb677cc6df6a
-
SHA256
9dfba2ccf7b9d1c81764839a2ff8cb49a9b64b28d289dfdf5c6b45ba71a988ec
-
SHA512
79cd155f217b4ee8dfdcbc4cd6f88aaaee62534b014384bdfe01318e36c35e334a7db29fc58fd690fb51868d99e90a5dc89da64eb9a57858e6a9abb1b7368969
-
SSDEEP
384:aCv8ogi8h0yubN5Bo7kp3DE045HS6666:aC81L+35BoiTA86666
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 447304eb8b62dc838c118df58a3081f0_NEIKI
Files
-
447304eb8b62dc838c118df58a3081f0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ