Behavioral task
behavioral1
Sample
9ed0e8cdd18edf6c19dcc049ded30bf0_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
9ed0e8cdd18edf6c19dcc049ded30bf0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
9ed0e8cdd18edf6c19dcc049ded30bf0_NEIKI
-
Size
1.2MB
-
MD5
9ed0e8cdd18edf6c19dcc049ded30bf0
-
SHA1
46261fbcd9c58a7f12ec523e9db7f5ccaf6f1caa
-
SHA256
8abf42a7d68433eda4ad06ee2bffaa93e4628aa29cdfbd0b11834779595b7430
-
SHA512
7c135538579deac84c53097edafc5c668788c4e8252a046b803d76a50df07d20e118bcfb56e9f95e0e512e8c46f978d79b665c7ba76475b987cbdd88f93fd1da
-
SSDEEP
24576:CXWEy7fPbUl8DYUCNXdCZam6CNYvZglfcbSIPHgE:cWEsfN+g3wg1CfgE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ed0e8cdd18edf6c19dcc049ded30bf0_NEIKI
Files
-
9ed0e8cdd18edf6c19dcc049ded30bf0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.jxmnr Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lpkez Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.g Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE