Static task
static1
Behavioral task
behavioral1
Sample
79fdc3c33851887cef61e384072f69b0_NEIKI.exe
Resource
win7-20231129-en
General
-
Target
79fdc3c33851887cef61e384072f69b0_NEIKI
-
Size
282KB
-
MD5
79fdc3c33851887cef61e384072f69b0
-
SHA1
d255cf8495cddacde0e4b660957d9aaaba59b907
-
SHA256
203d1b3e724f1797b41d8523c18db0a465a4b1b36e1a77ae931903c9242fbf4b
-
SHA512
847691cad1a3e24285ad38e771e21a80bb3564747afea3a642fb92b03e7295a71d7e9a83d3d43b8c665abdbe84de7848d100d6014fcc98540ab3534491551b5a
-
SSDEEP
3072:8hOm2sI93UufdC67cimD5t251UrRE9TTFe:8cm7ImGddXmNt251UriZFe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79fdc3c33851887cef61e384072f69b0_NEIKI
Files
-
79fdc3c33851887cef61e384072f69b0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE