Behavioral task
behavioral1
Sample
9b52f1c21e502d39930c4620f29ba280_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
9b52f1c21e502d39930c4620f29ba280_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
9b52f1c21e502d39930c4620f29ba280_NEIKI
-
Size
116KB
-
MD5
9b52f1c21e502d39930c4620f29ba280
-
SHA1
f524d1b1112c075b4c0882093613c4429176b8a7
-
SHA256
3ef0a73bc81334279d78920800356ac3f2d3975a5e6b8a212b19e8575d44551f
-
SHA512
a8cf0150ad06bfa881c81b791551772de7d8e88bc63af5a77355f9903fe35ca4c0a699eb5bc570b3a37c7906ef44aec9b7e3a657d21d3cc2e85a28d932ed1bff
-
SSDEEP
3072:PjzhZWxivgmhbI/pqqsBL/k0pZqW8dzNFXDjVCCp:PXC4vgmhbIxsBIT/djjB
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b52f1c21e502d39930c4620f29ba280_NEIKI
Files
-
9b52f1c21e502d39930c4620f29ba280_NEIKI.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bvxzt Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.yno Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vzkj Size: 512B - Virtual size: 4KB
.kemyz Size: 512B - Virtual size: 4KB