Static task
static1
Behavioral task
behavioral1
Sample
c0b7fa213d62bad2cf898a009c5a48d0_NEIKI.exe
Resource
win7-20240221-en
General
-
Target
c0b7fa213d62bad2cf898a009c5a48d0_NEIKI
-
Size
449KB
-
MD5
c0b7fa213d62bad2cf898a009c5a48d0
-
SHA1
83035da7818699de830a8a94d1164b325d32eda4
-
SHA256
e14da4851916d9efe5bfcf3e4eb09e31f347a493ccfb1d347a8236c93bfcd373
-
SHA512
f624a57e2e252c9fb0b08b0c1f8c831995534d488d2680834649438008669e16f19333c75655630d0673f27abc88ec0533e27742b3c59096f89dd18f131a0b96
-
SSDEEP
6144:8cm7ImGddXmNt251UriZFwfsDX2UznsaFVNJCMKAbe3:q7Tc2NYHUrAwfMp3CD3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0b7fa213d62bad2cf898a009c5a48d0_NEIKI
Files
-
c0b7fa213d62bad2cf898a009c5a48d0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 155KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE