Static task
static1
Behavioral task
behavioral1
Sample
d69a44f58912d4968b70a7be2ae77a20_NEIKI.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d69a44f58912d4968b70a7be2ae77a20_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
d69a44f58912d4968b70a7be2ae77a20_NEIKI
-
Size
111KB
-
MD5
d69a44f58912d4968b70a7be2ae77a20
-
SHA1
00e6b80077476f549cf4ee7ef3c0d75ca55bfb80
-
SHA256
9191b4f15eceb794e92ed1c60e8e1ab5909fc2736c777fe421eb1308a222cae0
-
SHA512
0126afcffc536953968cfa95096c9a4263f05a42afbb3129cc14b6547ea06bd2c4b0864ef9bbb60059434f911b02afb096c4eced9de680a006f4704ae05e22bd
-
SSDEEP
1536:Hlqls0GgUyj5JxdA4Oj3W2Fsdq4FwgG+sLfnLq01weW5yX3jFxv49Nu4GhQN:HQC/yj5JO3MnwgG+n3ysTGhQN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d69a44f58912d4968b70a7be2ae77a20_NEIKI
Files
-
d69a44f58912d4968b70a7be2ae77a20_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE