Static task
static1
Behavioral task
behavioral1
Sample
113e79c39664ac85cd688708ff407310_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
113e79c39664ac85cd688708ff407310_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
113e79c39664ac85cd688708ff407310_NEIKI
-
Size
4.8MB
-
MD5
113e79c39664ac85cd688708ff407310
-
SHA1
1130957825f7b5d15b4148e8da03ca4f2cc442bb
-
SHA256
eb6af12a4a19352ca33a494f7cd4cba6a9ded49a02328adff1fdb6d995d0642e
-
SHA512
5f1c0104fccee404956482bf83e6ff2a2d9cf3cf2d8fbbfbce8b4fa07563151ef8dc05ff0f270b182779f7a6932b86a357019a8b9acc2a2de0bf32c6ad62a3dc
-
SSDEEP
49152:ostg+GLsJI8lM2EPW6S8HShU8cNkzDCGM40Qco/BnUFK9BQL23umPw9Rv8kZd/4A:o6y/A8HMU8garDo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 113e79c39664ac85cd688708ff407310_NEIKI
Files
-
113e79c39664ac85cd688708ff407310_NEIKI.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 25.7MB - Virtual size: 25.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 716KB - Virtual size: 890KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 278B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/18 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/30 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/43 Size: 809KB - Virtual size: 808KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/59 Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/75 Size: 512B - Virtual size: 48B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/90 Size: 512B - Virtual size: 42B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/109 Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ