Static task
static1
Behavioral task
behavioral1
Sample
9756e29610937940edd51fe71eb56300_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9756e29610937940edd51fe71eb56300_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
9756e29610937940edd51fe71eb56300_NEIKI
-
Size
2.2MB
-
MD5
9756e29610937940edd51fe71eb56300
-
SHA1
6ca894834a01d2698af4bcd247f37f7458911d35
-
SHA256
df90485a2565163583483fc6f9870a83c02035eb5f1fd47b13bee8b152c4b908
-
SHA512
b1598816ab80b84c8cf11bc9690c07dd1856d1b1bc5aa17be23f7f4514b9fe66f477149a6aa94a06b3d52cda0a3b6afb1da0c1fe3edbef3bbc502dccc22ce730
-
SSDEEP
49152:WbN+QCbRquA/m2yL5zbfFiV+XenmE3/z7:WbN+5oq2VjnmU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9756e29610937940edd51fe71eb56300_NEIKI
Files
-
9756e29610937940edd51fe71eb56300_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE