Behavioral task
behavioral1
Sample
bfe53d9d3c52f351a426f64534c082a0_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
bfe53d9d3c52f351a426f64534c082a0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
bfe53d9d3c52f351a426f64534c082a0_NEIKI
-
Size
99KB
-
MD5
bfe53d9d3c52f351a426f64534c082a0
-
SHA1
a6e53c09385fb82630306dcf3f3c9f79de64c714
-
SHA256
97eebffa9a644608635b8da4b9ee76995b488075eb4b0c2ff7e6d7437185bae6
-
SHA512
47fd686d22dcc8bc246161c947edb603a2a51ccd7126db966d8e01ff50baaeac61336bb53ce675ce8d55833415cf110fdb6828481c25d63e0997bd52234890db
-
SSDEEP
768:jGvbqsQdX5BhGEnOsIzfJ4i4g5p0syi+hvN18K3H8T6++3KI4Fyu8hcLCik5dAyE:CzqsQ5PIt4+/yfeB6r6YcOik5h36l1
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfe53d9d3c52f351a426f64534c082a0_NEIKI
Files
-
bfe53d9d3c52f351a426f64534c082a0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE