Static task
static1
Behavioral task
behavioral1
Sample
824b6c9c29a954d9347663490aa19ed0_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
824b6c9c29a954d9347663490aa19ed0_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
824b6c9c29a954d9347663490aa19ed0_NEIKI
-
Size
14KB
-
MD5
824b6c9c29a954d9347663490aa19ed0
-
SHA1
f9c00672cfa9f97e9a5fe63ccce207deb3c6c828
-
SHA256
22ae645f25680980c45d01744eb041e3af78c8ff438df4935455a4efef44d69d
-
SHA512
570a7f92914d8eba13ac62beffac891e0035e41db5859b1996ae07fb0b043791fb2cefcc320951c04e9070582d7e00a3b5b62ca22680fbdfe6c035a34f234b80
-
SSDEEP
384:4gGSE9TldrqE6666666VdzAmCfDE045H:SSE95drq7FAtA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 824b6c9c29a954d9347663490aa19ed0_NEIKI
Files
-
824b6c9c29a954d9347663490aa19ed0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ