Static task
static1
Behavioral task
behavioral1
Sample
a3e5e6db1b6c1397a6ff3276d0599f40_NEIKI.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
a3e5e6db1b6c1397a6ff3276d0599f40_NEIKI.exe
Resource
win10v2004-20240226-en
General
-
Target
a3e5e6db1b6c1397a6ff3276d0599f40_NEIKI
-
Size
14KB
-
MD5
a3e5e6db1b6c1397a6ff3276d0599f40
-
SHA1
00f65c27d9e39100a110681337087531f1c5edcd
-
SHA256
26c7ec2e9f11852d161cd3d313b8da2b1ae1192d77583723d7a0677bda63b059
-
SHA512
8e85471732b69234db92d604366b9a8ebc7f5240719f82042e158ca6a46a9fa1dc6fa7e3ad7dc63598b5478bc3e7c25595ef666199cc00ad2c515cedf4a2dc33
-
SSDEEP
384:K/rvH0XhwTBxOdYEfhI+XhUmyMDE045H4hhhh:8H0KLzEJ7y0Aahhhh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a3e5e6db1b6c1397a6ff3276d0599f40_NEIKI
Files
-
a3e5e6db1b6c1397a6ff3276d0599f40_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ