Static task
static1
Behavioral task
behavioral1
Sample
189f19df280b8292eb70881c2eefd3b0_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
189f19df280b8292eb70881c2eefd3b0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
189f19df280b8292eb70881c2eefd3b0_NEIKI
-
Size
55KB
-
MD5
189f19df280b8292eb70881c2eefd3b0
-
SHA1
bbe9f2ca1dc89741db1ec88217080c8b7941589d
-
SHA256
6ac44cc50e2736aca7e3c97503aa3342729861cb0d1db802b6a34e3729d922e6
-
SHA512
57b8fb2bbf3eca8d065187588366241d07d94991784416925f0524ab26c51c6bd19237ca6890654122cb91ea4948c1b9c956c46c85936ad4932e59cda514e8ad
-
SSDEEP
1536:rU6JhlQvW4R8ZDW2OsdCj7VhJ/YY5rInouy8r:rRhlARSOsdwD/98out
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 189f19df280b8292eb70881c2eefd3b0_NEIKI
Files
-
189f19df280b8292eb70881c2eefd3b0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.... Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.... Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE