c:\Users\wmurphy\rms_agents\win32\DotNetAgents\DBStatus\obj\Debug\DBStatus.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9ab950c1d92ca1e51ed21a10ce8ade30_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
9ab950c1d92ca1e51ed21a10ce8ade30_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
9ab950c1d92ca1e51ed21a10ce8ade30_NEIKI
-
Size
10KB
-
MD5
9ab950c1d92ca1e51ed21a10ce8ade30
-
SHA1
9e8fd7cc8571f4a237269b117e20bc155ea59190
-
SHA256
89deef6f0fdcada3263103ddfcb48c81da1c95691f05de0869ee7732611bf6a2
-
SHA512
49da197abfd525984460f04b47258d823a567cb648673969f5d79820a55a4020699f29a7cc580bc0a87ee2115bee10521f4caaeed0d3e9b3f595a7cff724be88
-
SSDEEP
192:UZDggcI8wMlpAhpgtk98AoP8WQGWQ0PkLDBAP1lq:DgcIK6fgt1AoP8WrWHPQD+n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ab950c1d92ca1e51ed21a10ce8ade30_NEIKI
Files
-
9ab950c1d92ca1e51ed21a10ce8ade30_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ