Behavioral task
behavioral1
Sample
1b57983d2359953f8e59e4e2d5400730_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1b57983d2359953f8e59e4e2d5400730_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
1b57983d2359953f8e59e4e2d5400730_NEIKI
-
Size
1.8MB
-
MD5
1b57983d2359953f8e59e4e2d5400730
-
SHA1
321e908f537c88f3af3c86871683b398860d496a
-
SHA256
18279188cd726f2a26f84008fde5dffceb7627b05f949a0372eb1f784b9f5ae8
-
SHA512
5eb0b064fd7694659aea03787f3552c3d9be28e006e6af070dbfe52673c2adae505564d1adf60a1e61c9c0f4d9a3e75223dcd31af6bce193c71814a41e887c41
-
SSDEEP
24576:ShFZs9BHAPScBmNvES3etG9lF1aHNnR0JbmvWg3prbs2oPt2XDM7tFtVFXovg631:KFZHqiQD8R0Jiug39wmMfdoYMswz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b57983d2359953f8e59e4e2d5400730_NEIKI
Files
-
1b57983d2359953f8e59e4e2d5400730_NEIKI.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.i Size: 512B - Virtual size: 4KB