Static task
static1
Behavioral task
behavioral1
Sample
37f932f71439855d0ec801a60aac1780_NEIKI.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
37f932f71439855d0ec801a60aac1780_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
37f932f71439855d0ec801a60aac1780_NEIKI
-
Size
7KB
-
MD5
37f932f71439855d0ec801a60aac1780
-
SHA1
7b5ab2b473fdad29c05248d7ac37ea9a5c10f6f0
-
SHA256
af131158e8e83bfd5f4a51f5b691d60f016fa56d8e6f490e3a48e5884575efaa
-
SHA512
17d05e8f5103474f43e545ab5d4d088ebbe2176c5ba5c3252fd384fd4063ef617c59f21803903114bf6d8a33d83de92b4dca3712113794b15240618236371a01
-
SSDEEP
192:/vBJqAPhpeS1ZK8O3CDHdbzM60lkwiRKEgu:BUAPo2M3lke3u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37f932f71439855d0ec801a60aac1780_NEIKI
Files
-
37f932f71439855d0ec801a60aac1780_NEIKI.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE