Static task
static1
Behavioral task
behavioral1
Sample
81a9563b595c2276e973edc32007bc80_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
81a9563b595c2276e973edc32007bc80_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
81a9563b595c2276e973edc32007bc80_NEIKI
-
Size
709KB
-
MD5
81a9563b595c2276e973edc32007bc80
-
SHA1
16edf1534301f9627a304e7810dc203651ea5f10
-
SHA256
5aa3e1fb144816601b3b7fa45b3ac7cf74c5c0e6693cffa2139be46675eb3f5c
-
SHA512
c509656a080c9cbe55bcb4e39d54c66bc6d68a4406e7efcc0a1cd08fd3c4477c13feaa217b7007fb74d7e6295d5d48fda3776ea3091db5dfcacfd24c3866c238
-
SSDEEP
12288:zJFKXyvba0JDNEm/5jBlG+7MMLjC2ebc5dVAA+pNwCCA+yoZZJrC9ACLoZsQ5NLE:zzbWKDNEm/5O+7MMKTbc5dv+VClRPJZQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81a9563b595c2276e973edc32007bc80_NEIKI
Files
-
81a9563b595c2276e973edc32007bc80_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ