Static task
static1
Behavioral task
behavioral1
Sample
e658c09353bc3cdf69e9fe58e1d66980_NEIKI.exe
Resource
win7-20240215-en
General
-
Target
e658c09353bc3cdf69e9fe58e1d66980_NEIKI
-
Size
1.8MB
-
MD5
e658c09353bc3cdf69e9fe58e1d66980
-
SHA1
aa65d7d8fce5dfad6fd7c0a803b6259cebbb03c0
-
SHA256
eb59ae08bfa77f0b24836037a3d9b29f63170a50955e04b8ecf47b44ae35f6c4
-
SHA512
11855affaadb1e9828e887d37b52850dedf23900ed68666581d91fc7d8cff18064ab9dda0eb447afdf66876442c294ce4b7cabddd7184a2837117a43b6900e85
-
SSDEEP
49152:kGIXQHd6DOl/ZT46z/r3CVag7h4N894Ifg:LXkM1zyHh4N8u2g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e658c09353bc3cdf69e9fe58e1d66980_NEIKI
Files
-
e658c09353bc3cdf69e9fe58e1d66980_NEIKI.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 181KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iqsgtqbq Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jkabyyyg Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE