Static task
static1
Behavioral task
behavioral1
Sample
f383021c03652dadf5cbdff4ebc75880_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f383021c03652dadf5cbdff4ebc75880_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
f383021c03652dadf5cbdff4ebc75880_NEIKI
-
Size
14KB
-
MD5
f383021c03652dadf5cbdff4ebc75880
-
SHA1
7a6ea64d2dcf74d42790cf40e4f6805956e6d50f
-
SHA256
9c9ab4d6be6f67573d7d8f4b01ea7eed1761f04370149152f9e78e3be2d1b856
-
SHA512
4c09535665c7ababb99654238658032a7de33b295cb8d57bfa6fd42e002e6794af453330745825c03667ee2bb33798948de51a9975ad2f85379565a3be70551f
-
SSDEEP
384:rNIs3EnAxmniSwqcIAE09QQcln71DE045H:j0n3fXuErA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f383021c03652dadf5cbdff4ebc75880_NEIKI
Files
-
f383021c03652dadf5cbdff4ebc75880_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ