Behavioral task
behavioral1
Sample
6139ba9483e2217f66bef289dcc483a0_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6139ba9483e2217f66bef289dcc483a0_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
6139ba9483e2217f66bef289dcc483a0_NEIKI
-
Size
45KB
-
MD5
6139ba9483e2217f66bef289dcc483a0
-
SHA1
ac2bfb93df29d5b0184fb2a43414657c655dcd92
-
SHA256
90c1af151297a1e274adaed30bf8df59dbf925827d8d418f792ba689d825c40e
-
SHA512
83d614ad58b07965606ea53f5d37c648d108f45669cb83b25b784c9d5543f9238266ef2422bd2d233a6f4bfc6d95cb05b0d967e759b6f28a09c652a2017297c3
-
SSDEEP
768:Vpm7BcEKNvBcvL6VeRNL1a6ZO4PTPz+o+CKr3zQ4NuVVWgP4+z+q/xponbcuyD7v:VpfEKNCj6VoJl9Go5K7s4Nu34qDonouo
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6139ba9483e2217f66bef289dcc483a0_NEIKI
Files
-
6139ba9483e2217f66bef289dcc483a0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 42KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE