Static task
static1
Behavioral task
behavioral1
Sample
9bb3174eb99270db93b0e9701cf3b690_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9bb3174eb99270db93b0e9701cf3b690_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
9bb3174eb99270db93b0e9701cf3b690_NEIKI
-
Size
252KB
-
MD5
9bb3174eb99270db93b0e9701cf3b690
-
SHA1
ea9704567128c632db483d2845fa51363ef78f15
-
SHA256
061520f2e7dac1c65501fcc88e2b81d2d92e787f6fe19a411749ab27fdf07a56
-
SHA512
1688d0ecfa049f9dd9bb1e26f22e4ec7d83c7864832391b6bfd2a8fefd6537bc2ff9f87591beda634b2997c57916ebff4910bb08bb6d3167b640b99312bd327c
-
SSDEEP
6144:qu3iyiR6YIIY3MuAEVt2AlytBhkFiaru2M30tWlC:ViELIe3f1onda1K0tWo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bb3174eb99270db93b0e9701cf3b690_NEIKI
Files
-
9bb3174eb99270db93b0e9701cf3b690_NEIKI.exe windows:4 windows x86 arch:x86
580088be5b9847913956fceb480cc2d9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
FreeLibrary
GetProcAddress
LoadLibraryA
UnmapViewOfFile
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
CloseHandle
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetEnvironmentStrings
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetCPInfo
GetACP
GetOEMCP
DeleteFileA
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
GetStdHandle
HeapCreate
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
user32
MessageBoxA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ