Static task
static1
Behavioral task
behavioral1
Sample
c442b6a946fde364ed3b0333b5ddadb0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c442b6a946fde364ed3b0333b5ddadb0_NEIKI.exe
Resource
win10v2004-20240226-en
General
-
Target
c442b6a946fde364ed3b0333b5ddadb0_NEIKI
-
Size
14KB
-
MD5
c442b6a946fde364ed3b0333b5ddadb0
-
SHA1
00f87471c41682d31a17531e0fa2155075d8c384
-
SHA256
bdf3b6e43cbd93c6fb3f74d35b3bfcb168db4a9c42db2fc35b758984d6022d09
-
SHA512
d44e9191af735025d1cd918d683095cb4a3de91536c2fa4119640e3184cf1a3dd554f9dcef9f3f9d02f341398555fb8ab404512da8343ec74f5e6b7d5e9f025f
-
SSDEEP
192:2CMVC/InGlduiBP8P8P8P8P8P8P8P8P8P8P8P8P8P8P8qemmvyHTiRaAqDE045HJ:tpwYYf59avDE045HdlolololY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c442b6a946fde364ed3b0333b5ddadb0_NEIKI
Files
-
c442b6a946fde364ed3b0333b5ddadb0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ