Static task
static1
Behavioral task
behavioral1
Sample
306e0f19f041501c516cb73531ffdab0_NEIKI.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
306e0f19f041501c516cb73531ffdab0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
306e0f19f041501c516cb73531ffdab0_NEIKI
-
Size
29KB
-
MD5
306e0f19f041501c516cb73531ffdab0
-
SHA1
cf31af827098b6f7ea2b9a42f3e0c30ec3ded0a0
-
SHA256
c56d0253f0df1dd45d826e6f9ac71727104183abfc22a5d0e69f12f3963eef54
-
SHA512
5fee87942e6811de767ecf75f01397ce5427bbb27edf2e06e40ab50f152603b0275d2926d68f62c26e7829dd7ca736e3b0a26bf954f643c30176472c2c28cdf2
-
SSDEEP
384:XQoEmqWUIn+MUwjvehBT6A64FMLmty7lnajojGCZDS3hKnsA:XQEqsn+nwjWbOA6YMLLlnoKGCZO3hvA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 306e0f19f041501c516cb73531ffdab0_NEIKI
Files
-
306e0f19f041501c516cb73531ffdab0_NEIKI.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ETHLdWV Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
.Alk Size: 1024B - Virtual size: 827B
IMAGE_SCN_MEM_READ