Behavioral task
behavioral1
Sample
7c5d4c2c821b78e43244245e3a53dd50_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7c5d4c2c821b78e43244245e3a53dd50_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
7c5d4c2c821b78e43244245e3a53dd50_NEIKI
-
Size
36KB
-
MD5
7c5d4c2c821b78e43244245e3a53dd50
-
SHA1
814bd7795ab9e0a58c42edc0e62721348325f89b
-
SHA256
086805942b81c5346e19f171d80421876c9ee836b51adf29d5241291a62025e1
-
SHA512
fc8b5c8ee0afa2791f012fa0d84106c5cbf671faae60ca587894820032029e8ef0d4ae0ac8cf0505f608aa01c9243d49679de7e503dae59f81b172359f318d0f
-
SSDEEP
384:2BzvPympXCT6fS/E9zxlyVyph91KmlpeQyOAzcvSVnyPOJqHS+jPhyBGfRXdr810:2V1u6f59HphkCmyGJOvh6IzjpU
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c5d4c2c821b78e43244245e3a53dd50_NEIKI
Files
-
7c5d4c2c821b78e43244245e3a53dd50_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE