Static task
static1
Behavioral task
behavioral1
Sample
8100ed8bd3c5d3afb91a0efa26f013a0_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8100ed8bd3c5d3afb91a0efa26f013a0_NEIKI.exe
Resource
win10v2004-20240226-en
General
-
Target
8100ed8bd3c5d3afb91a0efa26f013a0_NEIKI
-
Size
119KB
-
MD5
8100ed8bd3c5d3afb91a0efa26f013a0
-
SHA1
02a5dca9d3fb7f6001716f085a765f7e88b19b4c
-
SHA256
897cc7e616be8823facd3421a2667228d5fa0230c9af4379c861ce4fbd82f841
-
SHA512
98ac3576971ef7e38233bc85d0e8ed4ef7a28d281d3e3d6c183460ebf1091dcde6e65de18da1393d1b2d5d7062160710247a58e0abe9718001873e2c5eed58c1
-
SSDEEP
3072:xYKJa3liqaEd+XGSdZJN9Vjdskm4l5gAkGMBu:xYma1iFEg2mN90kTl5gQAu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8100ed8bd3c5d3afb91a0efa26f013a0_NEIKI
Files
-
8100ed8bd3c5d3afb91a0efa26f013a0_NEIKI.exe windows:4 windows x86 arch:x86
32a94bee7d87d30f70983ab385f9f920
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
NtVdm64CreateProcessInternalW
GetThreadContext
ActivateActCtxWorker
GetProcessIoCounters
GetCPInfoExA
VerifyScripts
PssQuerySnapshot
CreateWaitableTimerW
RegRestoreKeyA
LZDone
GetFileSize
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE