Behavioral task
behavioral1
Sample
718a26f34c666bc944c3216b54016040_NEIKI.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
718a26f34c666bc944c3216b54016040_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
718a26f34c666bc944c3216b54016040_NEIKI
-
Size
666KB
-
MD5
718a26f34c666bc944c3216b54016040
-
SHA1
54f39cf49b2a25b35141dba2cfd2626d756615e4
-
SHA256
821ea92b36c84771b4751841cf18f746f3f4dd35d0f95e6236fe423c71c931bc
-
SHA512
4ff3e8f2a14384b66736fdb0e24d1ad501ce9bcb58be4c4bc8f9763f45627652cede1e0dc841cbf804653ed0559ee08ed1ccf029b343a54ef79c17d0ce3bf09f
-
SSDEEP
12288:lXpqhNqOh+p1GqLF4BsBq0VthVa9cLn3Wo5p/KXRUlLmBaBvJYgZj:lUU/aSF1k0VJ+C3Bp/KB8YiJYg9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 718a26f34c666bc944c3216b54016040_NEIKI
Files
-
718a26f34c666bc944c3216b54016040_NEIKI.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 60KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qhw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE