Static task
static1
Behavioral task
behavioral1
Sample
0463359eb26d76a0224488f3216de590_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0463359eb26d76a0224488f3216de590_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
0463359eb26d76a0224488f3216de590_NEIKI
-
Size
57KB
-
MD5
0463359eb26d76a0224488f3216de590
-
SHA1
3ae28b841d34030cc025ee6330e1aabc664ee3d8
-
SHA256
96b84b22458801e0dfb9f3e2953a56c1e993159472549386ea1eee323d6169fb
-
SHA512
6696dc7f703d4c186dbe96b584971e43647ded2df74ecb8ab84da89736ceb8371508b3d7fe9d8dcddec359ede11985cc58bd7b12c3125f712202edcdc0fe3599
-
SSDEEP
1536:DguYG+/dwhDVh5PvuAEMjEuwPQF/zRIJ1RKQB7J2xB:04/zRIJhB7J8B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0463359eb26d76a0224488f3216de590_NEIKI
Files
-
0463359eb26d76a0224488f3216de590_NEIKI.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ