Behavioral task
behavioral1
Sample
f3a7758e1ecd4a860dda1c988059eb60_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
f3a7758e1ecd4a860dda1c988059eb60_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
f3a7758e1ecd4a860dda1c988059eb60_NEIKI
-
Size
1.5MB
-
MD5
f3a7758e1ecd4a860dda1c988059eb60
-
SHA1
1ec46e3c0f5089155822501eec46e662c2c9bc01
-
SHA256
d1f7d8b20ae646cc49223b8129f4cdc6f8245686b5e413019432d4bef95ebfd0
-
SHA512
f0a24151174093f2f0b019d6189897b68aabf3deda8fcf4925d5a14b84317ace83f7706c02f51a5da41c91b4ce82d0d39b1271b36d8cbdd3c3b5d2d65c4e6ad2
-
SSDEEP
12288:c+UjTLktuguxvc2DD5TuVixuDCvK+7lvHs+D5oS4:czjPktgpczCSQJM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3a7758e1ecd4a860dda1c988059eb60_NEIKI
Files
-
f3a7758e1ecd4a860dda1c988059eb60_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 263KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE