Static task
static1
Behavioral task
behavioral1
Sample
479b8df568459683746f616a134f55b0_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
479b8df568459683746f616a134f55b0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
479b8df568459683746f616a134f55b0_NEIKI
-
Size
286KB
-
MD5
479b8df568459683746f616a134f55b0
-
SHA1
a191373b5ce6f2db15f1473ef735fac602c1ca19
-
SHA256
115ad0d017b2500d0e2edfc048910f2b39131d63847f0c53a9e13f9c4e3d0bd3
-
SHA512
3a3c9a4d4bb1b26df72cce72019c4fea11c6b462b6a865d2de554a8a909b175c3f5b55ef1d3d3ce1b9915947886a9933323e444437becb38a8340a9cf983de8e
-
SSDEEP
6144:OXC4vgmhbIxs3NBRWW5rv/LFeQP6vw5SDnF2lTCDo46XtYgAykmjn603:OXCNi9B95rvTF/8nFEmj6Xt1kEnX3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 479b8df568459683746f616a134f55b0_NEIKI
Files
-
479b8df568459683746f616a134f55b0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.xpjgw Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE