C:\Users\brknc\source\repos\rs-jon\rs-jon\obj\Debug\rs-jon.pdb
Static task
static1
Behavioral task
behavioral1
Sample
85e58f448a442c84bdb69f1cf721c030_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
85e58f448a442c84bdb69f1cf721c030_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
85e58f448a442c84bdb69f1cf721c030_NEIKI
-
Size
552KB
-
MD5
85e58f448a442c84bdb69f1cf721c030
-
SHA1
8f43587fa1c53239019fc929fa9295a5cc6ceca6
-
SHA256
9215fd85d7579701ee5e363ce0bb6ba41756bdd0ef704b341e160ca81d730178
-
SHA512
3d1d14e03e033540a29e32c6dd15c9a2a94268a34e1b7643fe2d0cb5a08fa915277cbb58aa0727222b44aabb1a3387a553a44f2b6ab18d8060bfaef32a42bba9
-
SSDEEP
3072:lv93bGTZjNX0DCNiIYmNytZ8mRffLXKiWCQaUc785imhaEvX05HjRrEy70wkhrth:J9bG1NtYjRfWOUTx5GjVL0nrtlm4H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85e58f448a442c84bdb69f1cf721c030_NEIKI
Files
-
85e58f448a442c84bdb69f1cf721c030_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 529KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ