Static task
static1
Behavioral task
behavioral1
Sample
67744f43c203dc50999d7440959094f0_NEIKI.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
67744f43c203dc50999d7440959094f0_NEIKI.dll
Resource
win10v2004-20240419-en
General
-
Target
67744f43c203dc50999d7440959094f0_NEIKI
-
Size
8KB
-
MD5
67744f43c203dc50999d7440959094f0
-
SHA1
c6e7267166fcf281ba86a7ad8c2b163d5d90bc6c
-
SHA256
8aa111d7fc06d5693b81b88f4f7d4d5b76bc5c410e78fab75f440d4a49b99fce
-
SHA512
2aab29037512c13c992d1d842089382f6787887ca8ece1ad22a09c97747403f6473ce3803ee4d4f0ab4eb3920b48529d3ecb48b97b9655d939b6dace80b7142a
-
SSDEEP
192:UknjPAwY6tWhEh/mE9e8j/pWt0JiYuz06:UknclDE/jQ6yz06
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67744f43c203dc50999d7440959094f0_NEIKI
Files
-
67744f43c203dc50999d7440959094f0_NEIKI.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ