Static task
static1
Behavioral task
behavioral1
Sample
659e7cd81a6ac651917257c2f1948f00_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
659e7cd81a6ac651917257c2f1948f00_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
659e7cd81a6ac651917257c2f1948f00_NEIKI
-
Size
652KB
-
MD5
659e7cd81a6ac651917257c2f1948f00
-
SHA1
60387bb4c204e3c703e563cb7b23ef488693d78b
-
SHA256
03d78c5df6424c0784d5da10571985eb44c6c5ffef318195daf2f597e91dd67b
-
SHA512
f4e2ce622fdb6acf8e21125b2e891aaf15d2bc132b0047c9aebc1e6fc0d7b7f514eb62191ef1404edb053f05cd91ac1bf7db7af2272420208c48669cf4b8ca8e
-
SSDEEP
12288:zJMxy+7SM0ZWEPZrkbYnGxRi0fIPOkUJDAboiQaBp3wsisCrdr6sMcKV:z2wTMUBGxR6OZJAbFQg3w/F1FKV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 659e7cd81a6ac651917257c2f1948f00_NEIKI
Files
-
659e7cd81a6ac651917257c2f1948f00_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ