Static task
static1
Behavioral task
behavioral1
Sample
64d355e76933bb3bb76b62acc2aff1c0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
64d355e76933bb3bb76b62acc2aff1c0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
64d355e76933bb3bb76b62acc2aff1c0_NEIKI
-
Size
700KB
-
MD5
64d355e76933bb3bb76b62acc2aff1c0
-
SHA1
d8c729c2719806273dd2bb3e7ea4fe8d3f779dda
-
SHA256
acf10f11f16d612bcf2319e14011d49acb34408da6bbd1012c31def535e82977
-
SHA512
326b4bfd5c6fd775e7edd374396ea9e77a9f9b173d50c12931516afafb8730a93e088bde8a093aebefc153dd0087548cea54b3645fe726f82a469ca34d97f6f8
-
SSDEEP
6144:41Qv8rK3FQp4LGCr9a9n4FRm6RGMXKqCQFHgTjx1i86JQPDHDdx/Qtqa:lOkiCpat4FU6JXKqFZgl1iPJQPDHvd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64d355e76933bb3bb76b62acc2aff1c0_NEIKI
Files
-
64d355e76933bb3bb76b62acc2aff1c0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 168KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE