Static task
static1
Behavioral task
behavioral1
Sample
e4d1dcd567ab27cdc0bcccc79aa2f630_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e4d1dcd567ab27cdc0bcccc79aa2f630_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
e4d1dcd567ab27cdc0bcccc79aa2f630_NEIKI
-
Size
76KB
-
MD5
e4d1dcd567ab27cdc0bcccc79aa2f630
-
SHA1
8081dfcef374a5378830df5ca4728ab1e064518d
-
SHA256
dceb711f4793fd790c7390b31a023c6ca4b4af727e28f0a6dffab73a77cc90e8
-
SHA512
9bf7d5b9d7af4461c8097d04d1040c479fb1496997b752a875363753c0d6aafb95c53774034b97212b3c546a90b3b32e46bc6a1738b0343c1381fff43526561b
-
SSDEEP
1536:NDj2d6rnJbJnJBSX1nV1b1N1Il1k1YFI1x1J1MuEqx517Q/1T1Jzct01Nsqnl1Ru:FlnnJBSX1nV1b1N1Il1k1YFI1x1J1MuN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e4d1dcd567ab27cdc0bcccc79aa2f630_NEIKI
Files
-
e4d1dcd567ab27cdc0bcccc79aa2f630_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shoooo Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE