Static task
static1
Behavioral task
behavioral1
Sample
252c93b2369832f74520d9af67788d40_NEIKI.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
252c93b2369832f74520d9af67788d40_NEIKI.dll
Resource
win10v2004-20240419-en
General
-
Target
252c93b2369832f74520d9af67788d40_NEIKI
-
Size
1.0MB
-
MD5
252c93b2369832f74520d9af67788d40
-
SHA1
510eaa5502d0531bca7e0dfe816df0de5aa742bd
-
SHA256
3589311a13dfb72923bf22a6e00b39018c94e313a0165f61b48cfdc029cf8598
-
SHA512
a94cf54f83a533793a952a6626d0d3fe304742c8c89607b502f85a1c72c912db3a0241c77e73eecdaffc077c08c106b68e063b3ea685dc50800326be9e8fcf9f
-
SSDEEP
6144:qzrzfp0o2XuzA/dmMVCJwj8f5uFa7Gvn8pa+VPZNcb1Y5kK1wHcEjNldxu6rtYXV:KxSYekZNcbCa1lj9ptK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 252c93b2369832f74520d9af67788d40_NEIKI
Files
-
252c93b2369832f74520d9af67788d40_NEIKI.dll windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.text Size: 796KB - Virtual size: 796KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Shared Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ