Behavioral task
behavioral1
Sample
9f08baeebaa0fd18368af364160c67c0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9f08baeebaa0fd18368af364160c67c0_NEIKI.exe
Resource
win10v2004-20240226-en
General
-
Target
9f08baeebaa0fd18368af364160c67c0_NEIKI
-
Size
769KB
-
MD5
9f08baeebaa0fd18368af364160c67c0
-
SHA1
d09a817a34716ff9defcb2b9a4a2f5a9e1f7f5ba
-
SHA256
83cb0c1757371e7942ab4e1f6c8e67c1a1cfb8e03d607bda11d291dfe6237205
-
SHA512
75591ccf06b9ce48a5b77cfe7400c5bcbae902b8f1654fa3f63d0a78f4f80ed4c07abf1625611aedc7a3499470a7cd4ee7f7694320ac1cffff1bdf43024c9ec7
-
SSDEEP
24576:AIlMP/KS/AAwekkkXdq9VJBpaM3jrvhL3WSEfV4GzMSvJSX:Al/KS/LwekkkXdmnBp3JgbMSvMX
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f08baeebaa0fd18368af364160c67c0_NEIKI
Files
-
9f08baeebaa0fd18368af364160c67c0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE