Static task
static1
Behavioral task
behavioral1
Sample
300de4c6311023137bfd70515586d990_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
300de4c6311023137bfd70515586d990_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
300de4c6311023137bfd70515586d990_NEIKI
-
Size
52KB
-
MD5
300de4c6311023137bfd70515586d990
-
SHA1
cdc3782e3deb7cdc7afdd44fa451330de7ad34fe
-
SHA256
537e772e99d31c08e0a2778f16d95ace9f25abe264b602e3999327910fe3df0b
-
SHA512
c9c5e722b2209ecd846421194e49c36239d3a8370a3507015f2ba62445b317b0a57be998715288b73a73921642c06429314d805742b56f57dcce1b0765af46c6
-
SSDEEP
768:C6CIl+vWxpTr99vMM3Hg9v/u5tq5WQD4qS6eN24DrDDDDDDDDDDDDDDDDDDDDDDP:C6CwGWPl9vZHgl/mtq8QETwANxoMAdKZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 300de4c6311023137bfd70515586d990_NEIKI
Files
-
300de4c6311023137bfd70515586d990_NEIKI.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ