applaunch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
02127c5779495b18f6e2b8af9d541710_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
02127c5779495b18f6e2b8af9d541710_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
02127c5779495b18f6e2b8af9d541710_NEIKI
-
Size
4.1MB
-
MD5
02127c5779495b18f6e2b8af9d541710
-
SHA1
f0f4d5eeeca83b981aa0403d8036954bf6c83695
-
SHA256
c1096cfc29f397331dda62f0c9cbe1ef3c19c53054f3ae2735866d633b03bf3e
-
SHA512
7bdab6d54c07df7fb33b05a2304dbe19a292b273dcfec3a296d6f8040a92a0646839676ed929458c1295acb90f85011bb2a4e811cc7ca2c67469d88a92b883d8
-
SSDEEP
49152:8/dvDllxzT2G+JWK+JLxrErF/N9YPlbIW8TJKr0AGx55E:KvDllxNK+JLCNanGd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02127c5779495b18f6e2b8af9d541710_NEIKI
Files
-
02127c5779495b18f6e2b8af9d541710_NEIKI.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ