Static task
static1
Behavioral task
behavioral1
Sample
8fe50ecf392a715c2048f85f315f9ac0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8fe50ecf392a715c2048f85f315f9ac0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
8fe50ecf392a715c2048f85f315f9ac0_NEIKI
-
Size
47KB
-
MD5
8fe50ecf392a715c2048f85f315f9ac0
-
SHA1
814cff4b48084946e46036be33ff6e9eecf1979d
-
SHA256
20b5582ba8de8dd72e8827752ea4a234613b18fccf302af657fbd92c4966bcde
-
SHA512
ca61747ec5e415bde090dd683bfbfddcd63c6597859b29857f828e09b146896f4f3c170b50037b48830be03ca8e76733c9232d41dda7b66ac1bd8d6ccf569914
-
SSDEEP
768:6msqjsZAj7VFYoeco6iCCa4Hq18wo3BEsil:rHjhFYoe/6r7oqCdbK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fe50ecf392a715c2048f85f315f9ac0_NEIKI
Files
-
8fe50ecf392a715c2048f85f315f9ac0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 43KB - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE