Static task
static1
Behavioral task
behavioral1
Sample
19d9bdbfb6e85b4b370ceff242e23c30_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
19d9bdbfb6e85b4b370ceff242e23c30_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
19d9bdbfb6e85b4b370ceff242e23c30_NEIKI
-
Size
14KB
-
MD5
19d9bdbfb6e85b4b370ceff242e23c30
-
SHA1
638735549fab3e600e67113a6c5d5ffb3de27cd7
-
SHA256
1a285fcaa15364861ef7131c65c3c98d3aa7e127fa4b6487148686088ed40a51
-
SHA512
a9be9b66adc749a502236873d6707d183508fc9458307836235109d7431534e28bfe2a8cf8bf4e38624617b2b0b9f6fdd31a0fd7acc9799eee209e830214e91b
-
SSDEEP
384:HoVh2L3YRuvSCXVmht1vMwGKZDE045H/:ah2L3YRiS5xMwGK5A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19d9bdbfb6e85b4b370ceff242e23c30_NEIKI
Files
-
19d9bdbfb6e85b4b370ceff242e23c30_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ