Static task
static1
Behavioral task
behavioral1
Sample
6bfacb9b0fcfcedfc77ca6204d294270_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6bfacb9b0fcfcedfc77ca6204d294270_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
6bfacb9b0fcfcedfc77ca6204d294270_NEIKI
-
Size
212KB
-
MD5
6bfacb9b0fcfcedfc77ca6204d294270
-
SHA1
16c4fb9112476cfda9e7ccf8d3a0d1998c544329
-
SHA256
3c4d1cfb9f6dfff426d97d099004aff575b373a3981ceebfbcbbd6138445d7f0
-
SHA512
b11ec9e9b01d4fb01e9f4a21b3613143b5495d2194a40a388b0a226eb4a54794641404869221d1d0067e454c4efc53c3bffa73db07c31f8808a7367c1be0e31b
-
SSDEEP
1536:/GeKWcKp3VywhsJPuZtze+yX8H1juIZo:SAjEPyty+k8H1juIZo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6bfacb9b0fcfcedfc77ca6204d294270_NEIKI
Files
-
6bfacb9b0fcfcedfc77ca6204d294270_NEIKI.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vryeypb Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textbs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE