Static task
static1
Behavioral task
behavioral1
Sample
94bab0e4bba3ae6075171298cb7786a0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
94bab0e4bba3ae6075171298cb7786a0_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
94bab0e4bba3ae6075171298cb7786a0_NEIKI
-
Size
572KB
-
MD5
94bab0e4bba3ae6075171298cb7786a0
-
SHA1
ac090c2905a07dbf66190a5a2fd113c5b5db83e6
-
SHA256
a71710b67c5cc24f7937ec2828c04bcfd8aa634b1d6648dd3cb90b4b6f4f0a04
-
SHA512
1157741c81dea907e0b4443488b021591cd9ff8897f0dbbe353250cba59a938d1f5d88bf577430b6073ddf1cb8e5bac78ab0c3569029e2a2710989f4f740e697
-
SSDEEP
3072:uCaoAs101Pol0xPTM7mRCAdJSSxPUkl3VpMQTCk/dN92sdNhavtrVdewnAx3wmVb:uqDAwl0xPTMiR9JSSxPUK1dodH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94bab0e4bba3ae6075171298cb7786a0_NEIKI
Files
-
94bab0e4bba3ae6075171298cb7786a0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 67KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ