Static task
static1
Behavioral task
behavioral1
Sample
6293a25f112793e32f9b5d8d84c787e0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6293a25f112793e32f9b5d8d84c787e0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
6293a25f112793e32f9b5d8d84c787e0_NEIKI
-
Size
14KB
-
MD5
6293a25f112793e32f9b5d8d84c787e0
-
SHA1
773de7574cc1a740a9105d59d354d38d82baae32
-
SHA256
afd146d085e67373c8b6f049a7762137f12b7034f01dce9dbfae07805a44c38f
-
SHA512
ddd873829e158f6b8559e78b6c3b0858c8dc45bd8c914cfe5073f7f9ebbabb34ea843347c4f6ae467c4717176cf64c9eeea3c6e3b7e1008f20996b93b800282b
-
SSDEEP
384:A9mLBCc3moCd93BLTv2yxq4DE045HDMcOMcOMcOMc:A9kBVUdjx7AlMtMtMtM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6293a25f112793e32f9b5d8d84c787e0_NEIKI
Files
-
6293a25f112793e32f9b5d8d84c787e0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ