Static task
static1
Behavioral task
behavioral1
Sample
ca14135ae7a5d5e9ac9c3c7ecc89b980_NEIKI.exe
Resource
win7-20240221-en
General
-
Target
ca14135ae7a5d5e9ac9c3c7ecc89b980_NEIKI
-
Size
433KB
-
MD5
ca14135ae7a5d5e9ac9c3c7ecc89b980
-
SHA1
e92c7f7a656364c3c3b6363b386d47cdc34b6715
-
SHA256
9ffdffe225cc68e42d1ed4361e0f9b76244555a661d49868f3a99d743573c71a
-
SHA512
abb19969d64d291ade0a7b5a6006cc5eaf2e28b366f6eabd191bc88a1f93b5aa0cc5391baf9095358f855dc486d22904394dfaf86d2c31c37c47a5fb400389f4
-
SSDEEP
12288:n3C9uMPh2kkkkK4kXkkkkkkkkl888888888888888888nR:ShPh2kkkkK4kXkkkkkkkkD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca14135ae7a5d5e9ac9c3c7ecc89b980_NEIKI
Files
-
ca14135ae7a5d5e9ac9c3c7ecc89b980_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ