Behavioral task
behavioral1
Sample
22a97d94421292271f31e639a7411cf0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22a97d94421292271f31e639a7411cf0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
22a97d94421292271f31e639a7411cf0_NEIKI
-
Size
7KB
-
MD5
22a97d94421292271f31e639a7411cf0
-
SHA1
da20006e99dc3ae36ed7e0e9ec1417e9767516c0
-
SHA256
9380bc02e427532dc90f8d34943ce3e8dffcb901f9a97db40191afbc72a67ec7
-
SHA512
cbc0bfef115c14f75680d620794feced7bf90e9da1244ba77a8da09e23a72f6c253946795426cd2c477c526ae9c1c739cf3585bed28f8b8726cc7d7705cdd766
-
SSDEEP
48:kQdmovh5egZQG1tTUzSTZaHm5VM/T8ySeJY8JTaSmc0eoBJ6LUbm2Zx5pX1lS:kQmovjeqdtTUzSTQHm5S/rmc8f6o/bS
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22a97d94421292271f31e639a7411cf0_NEIKI
Files
-
22a97d94421292271f31e639a7411cf0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE