E:\Developed\Programs\DiskCleaner\DiskCleaner\obj\x86\Debug\DiskCleaner.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9ffea3f697fc3fdf0159574c3f735860_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9ffea3f697fc3fdf0159574c3f735860_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
9ffea3f697fc3fdf0159574c3f735860_NEIKI
-
Size
222KB
-
MD5
9ffea3f697fc3fdf0159574c3f735860
-
SHA1
ccc9e5269083a33b3804e9895406e85ffa55fbab
-
SHA256
d0ba530449ce4b816e3777f972b5a06713c63d1d822034f71739d2f1a40b8c23
-
SHA512
a2e4c152a81624cf3f8279bb382192c85f8b204b77422902d1f32ae74abb2f102c8b362cb50d2e8b3bc4b4e4fb5a1a316b661996e05a481312a48d2e1ed0bcd9
-
SSDEEP
6144:4d+ZM4c7dma4UEgkK4xbSD4zkecgvSTljM4:S+aH794U3X3kbz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ffea3f697fc3fdf0159574c3f735860_NEIKI
Files
-
9ffea3f697fc3fdf0159574c3f735860_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ