Behavioral task
behavioral1
Sample
6d9af331f54162af9a1749c91e956860_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6d9af331f54162af9a1749c91e956860_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
6d9af331f54162af9a1749c91e956860_NEIKI
-
Size
1.5MB
-
MD5
6d9af331f54162af9a1749c91e956860
-
SHA1
801ffa97e78cd0c7114a913f0675c63e89df85c1
-
SHA256
d4ed979de791158ae25a98d7f4a36fe32411356aaa2a2809d57a31df6d23ee5a
-
SHA512
333726737640525a961083caa03deade71c6eaec2aa773ef95d1c708e36037fe7a245f63401bd2f5493609378e9d462b973646b86b38ad1a1e451db5a2384e26
-
SSDEEP
24576:noqBscXGNBl3YK93Le++CrM8JF4pU/A/iWK2loWxF7TrhDg8woOE9m/SE9hME9eg:ohlbR+eMP/ij2JxPZYkI5hLN
Malware Config
Signatures
-
resource yara_rule sample aspack_v212_v242 -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d9af331f54162af9a1749c91e956860_NEIKI
Files
-
6d9af331f54162af9a1749c91e956860_NEIKI.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 826KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 17KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 538KB - Virtual size: 544KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE