Static task
static1
Behavioral task
behavioral1
Sample
d617181551d76ea69cb76ba06d818c30_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d617181551d76ea69cb76ba06d818c30_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
d617181551d76ea69cb76ba06d818c30_NEIKI
-
Size
301KB
-
MD5
d617181551d76ea69cb76ba06d818c30
-
SHA1
881e794f6945956573db51937910e5625879de87
-
SHA256
8708a6e4ec0e482ac5fd6a29531c44878f4662ea5a9d80c1c4bbb780623ce2ef
-
SHA512
1b325adb56737e79b860c75cb122ed2c215d7949146b1cbc15689bca127c46b28edca88c20dd74a07cbc41160f6b51afb79846c9611365b5a6322da9250de590
-
SSDEEP
6144:RMMNvpOYoigXoINdcjPhiOtfb+sZRxHDnG9cGiYD9Bb/6a+mFs8jy:7zs4IIjhXtfqsbxjnG9liYD9BbXF9jy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d617181551d76ea69cb76ba06d818c30_NEIKI
Files
-
d617181551d76ea69cb76ba06d818c30_NEIKI.exe windows:4 windows x86 arch:x86
925027be34aac666b0253da7d1eb336a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crtdll
_fmode_dll
_fpreset
_iob
__GetMainArgs
_setmode
_stricmp
_strnicmp
_wcsicmp
abort
atexit
atoi
bsearch
clock
exit
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
ftell
fwrite
getc
getenv
isalnum
isalpha
isdigit
isprint
isspace
isupper
malloc
memchr
memcpy
memset
perror
printf
putc
putchar
qsort
realloc
setlocale
signal
_cexit
sprintf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strtol
strtoul
time
tolower
vfprintf
_environ_dll
_errno
_fileno
_fdopen
_fileno
_fstat
_getcwd
_isatty
_chmod
_open
_read
_close
_stat
_umask
_unlink
kernel32
SetUnhandledExceptionFilter
ExitProcess
Sections
.text Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE