Behavioral task
behavioral1
Sample
cc592750da91f2360b6be7e33e5584b0_NEIKI.exe
Resource
win7-20240221-en
General
-
Target
cc592750da91f2360b6be7e33e5584b0_NEIKI
-
Size
273KB
-
MD5
cc592750da91f2360b6be7e33e5584b0
-
SHA1
f69b3ab7b3218d62eb04cd1d7fc423a6733cc87c
-
SHA256
f88696f7018fa88b9bdd633f1d3aeec17cf8e5ae8e92e824b470bf1a5aea9395
-
SHA512
0b8539e89bd3aff1222d63d1c1a33da0baf354eaaba3e8e4ee575a4b92b81186e88dd0406c71e0627c6f77e32e4a8aec15284352f26c51459cf23f38a0ab5cb7
-
SSDEEP
6144:Ycm4FmowdHoSgWrXF5lpKGYV0aTk/BO0XJm4UEPOshN/xdKnvP48bmB:e4wFHoSgWjdpKGATTk/jYIOWN/KnnPE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc592750da91f2360b6be7e33e5584b0_NEIKI
Files
-
cc592750da91f2360b6be7e33e5584b0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE