Static task
static1
Behavioral task
behavioral1
Sample
c62ab38407f869c14ccdfa01d74acab0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c62ab38407f869c14ccdfa01d74acab0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
c62ab38407f869c14ccdfa01d74acab0_NEIKI
-
Size
80KB
-
MD5
c62ab38407f869c14ccdfa01d74acab0
-
SHA1
80f4e08a353a38735509e6002e03c46221eec849
-
SHA256
bdf67cc5014b33b655d7b416e4b414be5f62836fa709745a881e07758ad2f4d4
-
SHA512
58b5ebb8a10badc5107fc0629a0effd8385c7c84579b4be6b8b0720b38701e3b2c725d654969648c99ef32535f4e01691a8208cb0e8bfce1d9ac7675a36f0bc2
-
SSDEEP
1536:S/amXUoxCdA5ZXA8jQg/UhEIdJyzX0zDfWqdMVrlEFtyb7IYOOqw4Tv:SHFZXAxSIGzkzTWqAhELy1MTTv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c62ab38407f869c14ccdfa01d74acab0_NEIKI
Files
-
c62ab38407f869c14ccdfa01d74acab0_NEIKI.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ