Behavioral task
behavioral1
Sample
8d0f05fd829c6d1a7e4236362737e030_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8d0f05fd829c6d1a7e4236362737e030_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
8d0f05fd829c6d1a7e4236362737e030_NEIKI
-
Size
421KB
-
MD5
8d0f05fd829c6d1a7e4236362737e030
-
SHA1
b99f4d0320eff5be2662553d3f3df18b4c213b18
-
SHA256
020cfef97b7b4b24cecf379a5ab5c6c3b07c2d3a56041e6264fe55e78f217c60
-
SHA512
1b0761061c25f93387eb97473bfc4832069935e30f4946c00795fdc9073e0daca8349f66070e717c7b073323382f85add8f4a0e82048a94e84ab58aff50244cc
-
SSDEEP
6144:VjluQoSv4DSIo5R4nM/40yQcQv9k2qhlyChLDC0HaJsyUtrXtVvrzquHtkHCsW69:VEQoSfqIcQVoyChfvH3yIr/vrzquzrM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d0f05fd829c6d1a7e4236362737e030_NEIKI
Files
-
8d0f05fd829c6d1a7e4236362737e030_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE