Static task
static1
Behavioral task
behavioral1
Sample
b716e7368474116edb274d8569284920_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
b716e7368474116edb274d8569284920_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
b716e7368474116edb274d8569284920_NEIKI
-
Size
14KB
-
MD5
b716e7368474116edb274d8569284920
-
SHA1
00bf1734d80f4b8623c02e7870d26a55df0d9db9
-
SHA256
5adc65577059216b76f76bd5ae51a27b63f81c611f49f94c818bb1c97f5bc318
-
SHA512
d06f8df109c50703389aeecced9a7a0328dbbe79501959c5c599ee6943484982f394cdd1cb5a1bca43f08dc1cb2073a62e42af5af0bfa2975531c079bc020c5a
-
SSDEEP
384:KTjVq7smWXCe4d30R2fSI0450DE045H9vvv:KTpqISBdioF0aOAPvvv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b716e7368474116edb274d8569284920_NEIKI
Files
-
b716e7368474116edb274d8569284920_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ