Static task
static1
Behavioral task
behavioral1
Sample
be72e0d72e2391eaa08fb4397ec53380_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be72e0d72e2391eaa08fb4397ec53380_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
be72e0d72e2391eaa08fb4397ec53380_NEIKI
-
Size
1.9MB
-
MD5
be72e0d72e2391eaa08fb4397ec53380
-
SHA1
98521eaa3c0f3ddc4fe903b85d413dee61e0f40e
-
SHA256
ac5ff44a0ccfa6820cb6ae32ee3dd13c29043d0add8819c296f6b88b83dacab8
-
SHA512
cb54082b9ac03794fbd801de41876a957b5bb80fa9cc930b1dd0cc08019f93584dd60f4c11c5b973adb0df12c198c4dce9e4fb3539a26199f6d63fbe4c901475
-
SSDEEP
49152:ISlNHydXboE+2pKWTvP6p9kB/GS0fsXCFZ:ISjydNCYn0+C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be72e0d72e2391eaa08fb4397ec53380_NEIKI
Files
-
be72e0d72e2391eaa08fb4397ec53380_NEIKI.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 36KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fykeapla Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mfitzlay Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE