Static task
static1
Behavioral task
behavioral1
Sample
65e77731e7d8f33e1c964e0d0b751ea0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
65e77731e7d8f33e1c964e0d0b751ea0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
65e77731e7d8f33e1c964e0d0b751ea0_NEIKI
-
Size
65KB
-
MD5
65e77731e7d8f33e1c964e0d0b751ea0
-
SHA1
394793a83fe1284f4e263363db832bf1ff91871d
-
SHA256
aff8b6dbcbd1410a721cf0a3049b3d497d9617a69dd33907dbb05638f16a8904
-
SHA512
0788c354121205a9185597404b3b89eb18097c81dcf6bd8b758e184c9c6b6c517afd0b50c30418d335d3e11b246d3c7b1d5873bbce6ac620c0998c4dabbcfd69
-
SSDEEP
1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Ouv0000000000000000001:7WNqkOJWmo1HpM0MkTUmuR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65e77731e7d8f33e1c964e0d0b751ea0_NEIKI
Files
-
65e77731e7d8f33e1c964e0d0b751ea0_NEIKI.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 49KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE