Behavioral task
behavioral1
Sample
340f26713d27b55963be0fa53aa81120_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
340f26713d27b55963be0fa53aa81120_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
340f26713d27b55963be0fa53aa81120_NEIKI
-
Size
170KB
-
MD5
340f26713d27b55963be0fa53aa81120
-
SHA1
0d4e2ddaae18bb775276be0595bb7f6b77e471f6
-
SHA256
0a2c68749c4d518c78272a7e93eb9cb3f67a3979935151cdefd1c3574abd936c
-
SHA512
85b3712eacdfe7f7f7617db51469336a9f5855cf233b1e97296bc0bbb60dd87ab2ae9cbcc5c0ea296c128c926b8889089b09041b8f3b7e5e95202b314052677c
-
SSDEEP
1536:67Zf/FAxTWY1++PJHJXA/OsIZfzc3/Q4xFrphgL7Zf/FAxTWY1++PJHJXA/OsIZN:+nyiQSo+hgpnyiQSo+hgL
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 340f26713d27b55963be0fa53aa81120_NEIKI
Files
-
340f26713d27b55963be0fa53aa81120_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE