Static task
static1
Behavioral task
behavioral1
Sample
2c2f5b1a8588154a55b1985349227a50_NEIKI.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2c2f5b1a8588154a55b1985349227a50_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
2c2f5b1a8588154a55b1985349227a50_NEIKI
-
Size
383KB
-
MD5
2c2f5b1a8588154a55b1985349227a50
-
SHA1
44e308d45cd82a8896650ae4059c27301699fd15
-
SHA256
a87ef3dc121bd1fdacdde71ea00c1c5b8c33a240a82476a88ba1fbca39f5622f
-
SHA512
88b943a632db9281d24a45f3521da782da6771b2e3e841899b660845d28affc8e2f8abdac6475ae7d8b06099157518c715539b2a58306a4e492aaf5d2ea96f1d
-
SSDEEP
6144:/rTfUHeeSKOS9ccFKk3Y9t9YZnRVYI73Q0R0ycB:/n8yN0Mr8ZnRF7R0yy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2c2f5b1a8588154a55b1985349227a50_NEIKI
Files
-
2c2f5b1a8588154a55b1985349227a50_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
FKP0 Size: - Virtual size: 18.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FKP1 Size: 203KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE