Behavioral task
behavioral1
Sample
d23914a61c9ce4db22e7cc535b33caa0_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d23914a61c9ce4db22e7cc535b33caa0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
d23914a61c9ce4db22e7cc535b33caa0_NEIKI
-
Size
292KB
-
MD5
d23914a61c9ce4db22e7cc535b33caa0
-
SHA1
9e593951d9e7fd72632414c17e51de349beb4ff1
-
SHA256
b255e3cab43d08ecb3af0fb27789bf1218c3551e6ec0f43eb59810db1dfe8190
-
SHA512
d63d1d8f6c5d18cc1b717a68e9dd1ebecebb79d3ea606cceca2269972180968355ec5d5edbede4f41e64381a2a046cfdbe6a220d8798185a419857530f50ff78
-
SSDEEP
6144:JmCAIuZAIuDMVtM/LfAIuZAIuDMVtM/sZ:7AIuZAIuOuAIuZAIuO1Z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d23914a61c9ce4db22e7cc535b33caa0_NEIKI
Files
-
d23914a61c9ce4db22e7cc535b33caa0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE