Static task
static1
Behavioral task
behavioral1
Sample
11b3f9de2b7d358d4b502bea86577450_NEIKI.exe
Resource
win7-20231129-en
General
-
Target
11b3f9de2b7d358d4b502bea86577450_NEIKI
-
Size
65KB
-
MD5
11b3f9de2b7d358d4b502bea86577450
-
SHA1
e6f3c4054b7b383daa18c726afc72afcf8340919
-
SHA256
324aee8a3465d091c12368178516e616fa45c63c90f0fff6a8440b56894e221d
-
SHA512
4d8e51d871352ad30eff1a30c6274814c0a9d1640f5c97c7c5fe014004969098c65a678a29b06458e7a8371cc22be9b6dc11b275a15db3b2c134cd0c01030e4b
-
SSDEEP
768:lIOG9ohIQuXqxekjFxO50gac4zs5nh5SGkRBldaqmOKcTjqHDOEL9YzrFju8Kn6e:lo9KJjFxKZ5/kR/O+TcDZ5Cin6lx/8+w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11b3f9de2b7d358d4b502bea86577450_NEIKI
Files
-
11b3f9de2b7d358d4b502bea86577450_NEIKI.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE