Behavioral task
behavioral1
Sample
83e2f4556f490cfc94ccf7148dc2f2f0_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
83e2f4556f490cfc94ccf7148dc2f2f0_NEIKI.exe
Resource
win10v2004-20240226-en
General
-
Target
83e2f4556f490cfc94ccf7148dc2f2f0_NEIKI
-
Size
36KB
-
MD5
83e2f4556f490cfc94ccf7148dc2f2f0
-
SHA1
47795d164f92b2c246dd2464a0a453705e878e4e
-
SHA256
cf3d951db3586bbef07850d301c85b28069dfc12544b3d6f13e7a073cb846ce0
-
SHA512
ef9a343faa17c30eb7292d4d643aa3e0809e3e2886d498826c992f89b69605ad69ee5134f7bce513b148fbedbb821ef8d895ef050cfc7314420622b0e2dfdc5f
-
SSDEEP
768:lMxvSc0AdRxcAa3QN1xMxCuxVQCIgHpzd0:lMkyxcLyxy+FgJB0
Malware Config
Signatures
-
Smokeloader family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83e2f4556f490cfc94ccf7148dc2f2f0_NEIKI
Files
-
83e2f4556f490cfc94ccf7148dc2f2f0_NEIKI.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE