Static task
static1
Behavioral task
behavioral1
Sample
a565b4928795a18f0b393f928f3065a0_NEIKI.exe
Resource
win7-20231129-en
General
-
Target
a565b4928795a18f0b393f928f3065a0_NEIKI
-
Size
60KB
-
MD5
a565b4928795a18f0b393f928f3065a0
-
SHA1
e1bcce65df265323abdfb8d3f20a6dcdacc3fa4e
-
SHA256
87ca211eb49d64c7f8c91ff583f51fa9567c79543a9c42a55ed531c614fa7ad7
-
SHA512
850452e2e2e33f596909690d9f624a1def4579db37f77a481646aea77c88bb23ef9136da9e597eb6692a58fde282fe35b9de77c82ac1a0c4dd1c7d4c2cd99059
-
SSDEEP
1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIvAEaFJLl:ymb3NkkiQ3mdBjFIvAvl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a565b4928795a18f0b393f928f3065a0_NEIKI
Files
-
a565b4928795a18f0b393f928f3065a0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ