Static task
static1
Behavioral task
behavioral1
Sample
cb149ee509883a855e3cbce3f1ed7350_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cb149ee509883a855e3cbce3f1ed7350_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
cb149ee509883a855e3cbce3f1ed7350_NEIKI
-
Size
359KB
-
MD5
cb149ee509883a855e3cbce3f1ed7350
-
SHA1
966391f65693ec896ed252dc695a0e454ddec085
-
SHA256
c08796ed2ad9f23b69e5dd48b0c13e28e26d7c9d3575fd48d1abb90b391f8a8f
-
SHA512
62e6df50b197a5b28d066edfd07903996436269dccc5d9835bef1be3808a9b74348ecbd07e6e8a5ff82b1fa97ae07e83ca6efeed2f11303e2224508f4f9d9ddf
-
SSDEEP
6144:zJFzjKA8e+XJy5UpOENwjgzUpg8wuHz7FC4jKIg8XI6S:zJFKZy566gzU28wy3jpgSI1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cb149ee509883a855e3cbce3f1ed7350_NEIKI
Files
-
cb149ee509883a855e3cbce3f1ed7350_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ