Static task
static1
Behavioral task
behavioral1
Sample
381afc6999c79afd56de53310bf09f40_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
381afc6999c79afd56de53310bf09f40_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
381afc6999c79afd56de53310bf09f40_NEIKI
-
Size
14KB
-
MD5
381afc6999c79afd56de53310bf09f40
-
SHA1
2a4d31442884d7782d10d0ba96de83dda6c618c3
-
SHA256
2b2873eac3c17da3d9be55c3eefcdee4edcdbcee5ade0b789e50641955109752
-
SHA512
84e778ea27613d524aa22d854f21a3e0029cde8f53e4833ee170ddde297b9261d8fa404ce865dc3e7b28bbe3eb9cb004f254a5e34e505541650f59a6bc1e486a
-
SSDEEP
384:Sdz+L7MEDir/69U0mvSAPn1oUlDE045H4:Su7o/ozCSGVlAm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 381afc6999c79afd56de53310bf09f40_NEIKI
Files
-
381afc6999c79afd56de53310bf09f40_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ