Static task
static1
Behavioral task
behavioral1
Sample
70736450b10716d242a458d8da863e00_NEIKI.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
70736450b10716d242a458d8da863e00_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
70736450b10716d242a458d8da863e00_NEIKI
-
Size
1.2MB
-
MD5
70736450b10716d242a458d8da863e00
-
SHA1
309d5fff4a193954d05c69a4d8ee26825db588b9
-
SHA256
6c90c859f0da1579a7851756ba7c02793d42df093b3a27811a1dbee3ee1d1743
-
SHA512
e6f13f97667591ea941b8abab65f5e183b13e67ec09dda4b86e2486510a873574674e4a5a5e3a3f92160ea7e93c2e7f1abb4f8a251c00cb73e534e302c8bb6c0
-
SSDEEP
24576:Cm+wKMdQqI4ehbQ9V6cxm18ShDX7MWn34Y:CwtpVro18pY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70736450b10716d242a458d8da863e00_NEIKI
Files
-
70736450b10716d242a458d8da863e00_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE