applaunch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0aecca80a7235ed4123b5e954425f200_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0aecca80a7235ed4123b5e954425f200_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
0aecca80a7235ed4123b5e954425f200_NEIKI
-
Size
4.6MB
-
MD5
0aecca80a7235ed4123b5e954425f200
-
SHA1
f45f3b9ad4f297363d43c8b04dc0854cacb9e377
-
SHA256
fcc468b315dfc2e2cf2a3fdb1ecf1ad01cd0c9ab23414eda7c3ba461ab618821
-
SHA512
46990c6982fa6b5d196ed258b6e2532348709b6fc305386ef3e9f265738e5e17c98c8ea6b6566ddd1751961b6a958e735e7190a0a343c0f67a06aa41b76b0001
-
SSDEEP
49152:8/dvDllr/DzvKfNuIhakf8V8y9wSN2cHXt9SLTvkTvkTvkTvc:KvDllrDzMcOe86ww2yu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aecca80a7235ed4123b5e954425f200_NEIKI
Files
-
0aecca80a7235ed4123b5e954425f200_NEIKI.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ