C:\FlexCell2008\English\TreeDemo\VB\obj\Release\TreeDemo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8f5abc10ad325035f8c6692b315cc440_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8f5abc10ad325035f8c6692b315cc440_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
8f5abc10ad325035f8c6692b315cc440_NEIKI
-
Size
42KB
-
MD5
8f5abc10ad325035f8c6692b315cc440
-
SHA1
a95c1f2f7d8666bff100073a9ecd9518515b422f
-
SHA256
e5a7ffe649fe571a5b9a00b6c048bb78069dda155ce94287d2d55f8c31968f1c
-
SHA512
1dfc2e443281bd86cc100362da423d5e0d1bbe9f513fde9f6fdf4cf71611ef33028d2a6d640db6db6cebd26c41464c15a95a1b6df49baed8d4b932dddb6503b1
-
SSDEEP
768:kWS0LuMcRI8HiWL1Yl76rUT8gYa29SrwBfD4faDu2oFmYbESCkYIfV2hJ8m9pFw8:kuJynCWLow1pKFmYbESCkYIfV2hJ8m9L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f5abc10ad325035f8c6692b315cc440_NEIKI
Files
-
8f5abc10ad325035f8c6692b315cc440_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 113B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ