Behavioral task
behavioral1
Sample
491f693203dd0d4363dadf7539b3f620_NEIKI.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
491f693203dd0d4363dadf7539b3f620_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
491f693203dd0d4363dadf7539b3f620_NEIKI
-
Size
1.2MB
-
MD5
491f693203dd0d4363dadf7539b3f620
-
SHA1
28f2ec08483bf498c3fefa80dd887719867326c7
-
SHA256
d11e402ca62cf67b0ba8f12e4e675f315cf8492031e0ed81f9ac2a2fdc392a84
-
SHA512
6c0b81f1e87b2f2721bee58ae2340b3a5865dd2aa77bd023aa1367b9a145cf2cb86d44e127f920e16cd5ce639cf8affaa1b1728d41221eec8700e7e0bb180781
-
SSDEEP
24576:UqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm:LylFHUv6ReIt0jSrO2
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 491f693203dd0d4363dadf7539b3f620_NEIKI
Files
-
491f693203dd0d4363dadf7539b3f620_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 844KB - Virtual size: 844KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 377KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE