Behavioral task
behavioral1
Sample
93eb44550c4da164d4302f60ce98ba00_NEIKI.exe
Resource
win7-20240221-en
General
-
Target
93eb44550c4da164d4302f60ce98ba00_NEIKI
-
Size
82KB
-
MD5
93eb44550c4da164d4302f60ce98ba00
-
SHA1
d33f866bf8a5887063fb9b97dde289bf8ed104af
-
SHA256
2a7d8546b9df76757a2efa993edf0963b9a9a80eac904d9940d0c48bb8b74b9e
-
SHA512
9bbb9cd018db6ba513720056af72017cfab94f6e1c9c31a13febd1daca64cdff6de0470f38e3c8f7da981e8e07f05f0e50f784fb286ecffa217b6dc780d1f804
-
SSDEEP
1536:zvQBeOGtrYS3srx93UBWfwC6Ggnouy8iT4+C2HVM1p6TQpCihft:zhOmTsF93UYfwC6GIoutiTU2HVS64hF
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93eb44550c4da164d4302f60ce98ba00_NEIKI
Files
-
93eb44550c4da164d4302f60ce98ba00_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE