ehExtHost32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
122513c0695d6dc5bb0dbefd323046b0_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
122513c0695d6dc5bb0dbefd323046b0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
122513c0695d6dc5bb0dbefd323046b0_NEIKI
-
Size
4.1MB
-
MD5
122513c0695d6dc5bb0dbefd323046b0
-
SHA1
6ead2723f7eab3d63dc1cdaf1643ec56e56167f1
-
SHA256
5de502b612127af066ef102d2a2d948075a2e9878512be6bba2469d7f7c58278
-
SHA512
7b85764e6954b76bde7f20559928187ad9290e3894cd2c90da45f01887c90d9394545ac146c4bb1356e45ff39c8316dcb3553f25ff0762a38c6ff27204a5333c
-
SSDEEP
49152:uc0g7mM+M6RkMkIM7I067LEz4ZqhaK6zbfqdltXBMO+YrovpU/9L:qM+M6RkMkIM7x0xTOgy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 122513c0695d6dc5bb0dbefd323046b0_NEIKI -
NSIS installer 1 IoCs
resource yara_rule sample nsis_installer_2
Files
-
122513c0695d6dc5bb0dbefd323046b0_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ