Behavioral task
behavioral1
Sample
8586eeb54066f29107852cbaab6e6b00_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8586eeb54066f29107852cbaab6e6b00_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
8586eeb54066f29107852cbaab6e6b00_NEIKI
-
Size
247KB
-
MD5
8586eeb54066f29107852cbaab6e6b00
-
SHA1
10928e4bc4f17e78b5ee17d288b8c4ad5276bf62
-
SHA256
7ffddcd3a65fc92bed40b540090b2e8d6a1e16b9d81cafb0334b8ffc51eb84ee
-
SHA512
edd1937f9556c65cb00093a703e4adf6e3bcf68d7b32981ca4c1784128069417930dec58fdace6388c4411e73613f456d16645b1d194c2e81cc45c66b50d4df5
-
SSDEEP
6144:JmCAIuZAIuDMVtM/XS4mCAIuZAIuDMVtM/XS9Jn:7AIuZAIuOYSqAIuZAIuOYS7
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8586eeb54066f29107852cbaab6e6b00_NEIKI
Files
-
8586eeb54066f29107852cbaab6e6b00_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE