Behavioral task
behavioral1
Sample
88ecc9efe0ba0a0515595460b37fe270_NEIKI.exe
Resource
win7-20240508-en
General
-
Target
88ecc9efe0ba0a0515595460b37fe270_NEIKI
-
Size
41KB
-
MD5
88ecc9efe0ba0a0515595460b37fe270
-
SHA1
77161597815c929213728b33046450b6b54c5442
-
SHA256
eeb2218bf0759c7edc610bca8103715db1e7fd461a5b6abf4d56d11b77cfd966
-
SHA512
30ba00d06cb92aeef90874a7aed9171de0ed40a3ba1a7e99ff4dd1de86ef7be2b79e86cd4bc5bb5744087e23bf11f14c80b3e44695f055eb2d12f89fb7d5f75f
-
SSDEEP
384:XqnuO1JCHYdHz4XpfHEI6/dDEPjaVC6fMbUyFm0tyXLBI89wvuAv1mwnA3Z3BXR2:Xqnum1F6/789ujYTyLylze70wi3BEmu
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88ecc9efe0ba0a0515595460b37fe270_NEIKI
Files
-
88ecc9efe0ba0a0515595460b37fe270_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE