Static task
static1
Behavioral task
behavioral1
Sample
9de895870bd814d6fa04e6db84ba7ea0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9de895870bd814d6fa04e6db84ba7ea0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
9de895870bd814d6fa04e6db84ba7ea0_NEIKI
-
Size
659KB
-
MD5
9de895870bd814d6fa04e6db84ba7ea0
-
SHA1
4979fa12642994f4cd467239639d2c1d931ad839
-
SHA256
994270e44bb3d7d8ca5bdaa49597f6a3df89b9fb265adced79dc546df25ae408
-
SHA512
651692c1078108dfed25334ac3ae70d376a27f2727cb122583ba3500454c24800443bebdf43b753bc52be3d8b11b1fec94a5ab5d441a1e67b6c5e226b7408976
-
SSDEEP
12288:RT5J33GwfSu2Cw/MygY507sRYMLjC2ebcUzu+QT/Wu03zImhrnpZwFrTx2:RT5J33PzVwUz7DMKTbcUz7WULhkFw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9de895870bd814d6fa04e6db84ba7ea0_NEIKI
Files
-
9de895870bd814d6fa04e6db84ba7ea0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ