Static task
static1
Behavioral task
behavioral1
Sample
6b1edf416fc9e24fb0c2fec93a446880_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6b1edf416fc9e24fb0c2fec93a446880_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
6b1edf416fc9e24fb0c2fec93a446880_NEIKI
-
Size
4.8MB
-
MD5
6b1edf416fc9e24fb0c2fec93a446880
-
SHA1
fa8536252e6a8233a3b901b8659fa76bd7eaf776
-
SHA256
5e7d0e41fe4ad3e39d42ebf6381c5d28aee298a7754561fac2cc422196fa1f57
-
SHA512
c8b6aa0974834540ea67e4ec160e21cf4b856c150889cfd2f99dea54bc70869864aba09b1a68a112994f9d6342a15a27bb3759645a0edc5ecc132252588a7e97
-
SSDEEP
98304:sSDnA31vIRY346h1+vIgYcnlZUyw1TGKiRxRGvsMFXzjmskVP:sSTA31vIRY346h1+vIgYcnlZUyw1TGKk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6b1edf416fc9e24fb0c2fec93a446880_NEIKI
Files
-
6b1edf416fc9e24fb0c2fec93a446880_NEIKI.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 278KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ