Overview

overview

8

Static

static

8

1c064f5160...KI.exe

windows7-x64

7

1c064f5160...KI.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1c064f5160a25a67053fd67becc22590_NEIKI

  • Size

    1.8MB

  • MD5

    1c064f5160a25a67053fd67becc22590

  • SHA1

    9e6b8e06187459ea7147a78418f1a45932249214

  • SHA256

    144a1297179820b4f2ea8e6843ab79dde5165d4b6d4390a1d6c3fdc18143c70e

  • SHA512

    ded2fdf22078c1ca0b6e782d29925047ebf1da09cdb0f1a4055b588244c65e3b647ab7907f4ae757953d67161048fc0ac927be7e75e60207cca8b6e45765bd9c

  • SSDEEP

    49152:L+xF55JbPLRSE4OOYG02wdevphB0/OltIBCuUvi1WaHbFrXStyxbiEwKP4Cs:CxFRPtXBOwohhemlaANi0ybFrXStubig

Score
8/10
upx

Malware Config

Signatures

  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c064f5160a25a67053fd67becc22590_NEIKI
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections