Static task
static1
Behavioral task
behavioral1
Sample
8cb2d7c8605249cfbdf8926bfd9e4700_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8cb2d7c8605249cfbdf8926bfd9e4700_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
8cb2d7c8605249cfbdf8926bfd9e4700_NEIKI
-
Size
4.5MB
-
MD5
8cb2d7c8605249cfbdf8926bfd9e4700
-
SHA1
c3157011a40df30a83f5a103ee4a4727f813940e
-
SHA256
2ecde9e4a579297bfc7e62f9efe8e9ba6edf8924c71b8dcea3e3544207d90f7c
-
SHA512
faee0b8ae16013601fdb79897beef947fa6633be374fba9e9fc0d9cbc40e311377855a1740be87a4468daeae496b40ef2dc5a76b58d4278ccbb7ff8e936e8019
-
SSDEEP
98304:QrNONuXNXuoGuvLpSSbiu/Pu5EcaFuanUKtbW:YNONudCuvLou3u5vgtbW
Malware Config
Signatures
Files
-
8cb2d7c8605249cfbdf8926bfd9e4700_NEIKI.exe windows:4 windows x64 arch:x64
Code Sign
19:fc:d4:25:49:32:d5:92:4c:41:c8:a8:8e:a6:53:f9Certificate
IssuerCN=GARY_LAPTOP\\gshelNot Before20/02/2024, 20:52Not After20/02/2025, 02:52SubjectCN=GARY_LAPTOP\\gsheld5:15:2a:b1:27:e5:cf:ea:95:8c:f6:57:52:a4:4c:50:b2:d3:bc:f3:19:70:4c:ea:01:30:36:20:2d:c9:27:23Signer
Actual PE Digestd5:15:2a:b1:27:e5:cf:ea:95:8c:f6:57:52:a4:4c:50:b2:d3:bc:f3:19:70:4c:ea:01:30:36:20:2d:c9:27:23Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\gshel\SayIntentions Dropbox\SayIntentions Team Folder\Dev\Client\SayIntentionsAIClient\ATC_Client\obj\x64\Debug\SayIntentionsAI.pdb
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ