C:\!fdev_net\Sources\C#_SQL_2017\Tools_audit\PatEdiIR\PatEdiIR\obj\Debug\PatEdiIR.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cb43e9db10620e38d3053d369753c670_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb43e9db10620e38d3053d369753c670_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
cb43e9db10620e38d3053d369753c670_NEIKI
-
Size
157KB
-
MD5
cb43e9db10620e38d3053d369753c670
-
SHA1
09137df1f8de7a8ad3c0db96ddf0d019017be171
-
SHA256
02babf84a3a0c2b7f5d9cf6abb0f196ff4070dd8d2317239c3e2782af25b0432
-
SHA512
bd06a80872b941dff4d140cf340ee623bd0ee78085d2c687949d5120a957a16df844dde406fb22785c674d36309de454e82c367e273a38edf46c4b5f312ee9dc
-
SSDEEP
1536:VW/3O50PM5ieJkPVyP/XIimODUFZqMUHuXsIRGhihR9P1PGRD3X3JS6KrJg1adiJ:Q+cD2gtRGhiP6KrJg1qCA4bgaAqXh3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb43e9db10620e38d3053d369753c670_NEIKI
Files
-
cb43e9db10620e38d3053d369753c670_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ