Static task
static1
Behavioral task
behavioral1
Sample
5dd3464fee40447f4caa69876a625ff0_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
5dd3464fee40447f4caa69876a625ff0_NEIKI.exe
Resource
win10v2004-20240226-en
General
-
Target
5dd3464fee40447f4caa69876a625ff0_NEIKI
-
Size
383KB
-
MD5
5dd3464fee40447f4caa69876a625ff0
-
SHA1
7876f2cc13aa69ac0a2707781d3eef94c51fff44
-
SHA256
733976d97da98f094114258a1e2ab5829a7ee5bda4bda9edc78994b2ded05ffa
-
SHA512
929390421e93686353bb4f1ecda282766f97f89aed3e440bb661861ef825bd278e25e490b3624d55a55ee3888644c10a452f249c2d7f3db1a0064b7f46afca1c
-
SSDEEP
6144:wlj7cMnR+RjU66cUfjUM6XfTgGALKPe/PppYhj4Cibq21:wlbR+pU66cYjUM6XJA22XUg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5dd3464fee40447f4caa69876a625ff0_NEIKI
Files
-
5dd3464fee40447f4caa69876a625ff0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
VHqxTUpa Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IaDsgWGk Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE