Behavioral task
behavioral1
Sample
f0e46c1b5e03c59f891af2c48f032e80_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f0e46c1b5e03c59f891af2c48f032e80_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
f0e46c1b5e03c59f891af2c48f032e80_NEIKI
-
Size
3.7MB
-
MD5
f0e46c1b5e03c59f891af2c48f032e80
-
SHA1
6eefd68ea5fe958f0c999b889cf8e37a0cbc66a7
-
SHA256
044761804ffbeeeea82fd9a5f01690f8a9f396077949165b990656402fcbbf8e
-
SHA512
57bb6f47fba335982e2fdb3e95ecfcaa8eae7e2b5d98b00b931f45e122f7d8f29e58189af15b6842b4ff86f94badb53dc70eb57adba47ba80923fc126800a3a0
-
SSDEEP
98304:pM28qiRjPYpc0OMan4NVRKsnAKsPr+5XobYlHYdKpmx9O35f:63qejPYpcb4bRzd5Rl6lIf
Malware Config
Signatures
Files
-
f0e46c1b5e03c59f891af2c48f032e80_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ