Static task
static1
Behavioral task
behavioral1
Sample
659e96550c20b6ad280aa85ec174fd30_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
659e96550c20b6ad280aa85ec174fd30_NEIKI.exe
Resource
win10v2004-20240226-en
General
-
Target
659e96550c20b6ad280aa85ec174fd30_NEIKI
-
Size
118KB
-
MD5
659e96550c20b6ad280aa85ec174fd30
-
SHA1
fe839349ee8a84aa89c99f8fbe77584b8c6a2f9f
-
SHA256
598daf81c1b73e085428fe1c9d73e9f3c15d0f89afcd92b5ade74c482fed52fb
-
SHA512
87ff9afe5ec8e4d10a5f9cb41fd4c069fd3f01475ec43bb2aa12b5889a2dc146fddd7f8e8d1c1be432db0f25051f5879e4d31a186e26044df09d1848cb5d05f9
-
SSDEEP
3072:ZOjWuyt0ZsqsXOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3rnXLHf7zjPPo:ZIs9OKofHfHTXQLzgvnzHPowYbvrjD/h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 659e96550c20b6ad280aa85ec174fd30_NEIKI
Files
-
659e96550c20b6ad280aa85ec174fd30_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
v13bahxz Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5438kank Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
54z2lcpg Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE