Static task
static1
Behavioral task
behavioral1
Sample
5a08b0624959c8cc07277148a3c25870_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5a08b0624959c8cc07277148a3c25870_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
5a08b0624959c8cc07277148a3c25870_NEIKI
-
Size
411KB
-
MD5
5a08b0624959c8cc07277148a3c25870
-
SHA1
9148a79f5f1f5f867658b6da80ed062c5362eebf
-
SHA256
c0db610df01b7027755eb5a2d9720fe585ef7e6890cdcbed82de3dbf7c0f1980
-
SHA512
4837a96e80117a357d3eee0d49ec9519b5316852b01541d49088b570efc1b49997810eef1d79037efbaf54803283bb9ca4d7aacc9ce4b1143d4a0b1d1a21a20f
-
SSDEEP
384:XJ6wayA+1mwnA353BXR+oGfPmfm4MlcTGXdhjwroyY2rebV5O6KhdWb/83BXR+o8:ZpQNwC3BESe4Vqth+0V5vKUE3BEJwRrs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a08b0624959c8cc07277148a3c25870_NEIKI
Files
-
5a08b0624959c8cc07277148a3c25870_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ