Static task
static1
Behavioral task
behavioral1
Sample
2d8a6526883e38d9c1236461d1213050_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2d8a6526883e38d9c1236461d1213050_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
2d8a6526883e38d9c1236461d1213050_NEIKI
-
Size
947KB
-
MD5
2d8a6526883e38d9c1236461d1213050
-
SHA1
ff6f36348036608debc6b986baa74212db7c3ca9
-
SHA256
05cd97888f4944ab4acc7b3feff1b74b360355c212a9eb7eb7b4a40e4772444c
-
SHA512
c59bb70dd44a69606f4cce0a953cc4e68adee88eb5b07aa5cf815cf6973c39ce48bb2d5e89f57de53a4cd70d7893d00874ed6897bfdf2a193f5da9e4cf04f09f
-
SSDEEP
24576:euZhVCm7wrSRxvyuj19Wasr+jY+vW/miM9Hmu:euZlNvsKjQUv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d8a6526883e38d9c1236461d1213050_NEIKI
Files
-
2d8a6526883e38d9c1236461d1213050_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ