Static task
static1
Behavioral task
behavioral1
Sample
943e507727c7e35126b29f76ffc0c230_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
943e507727c7e35126b29f76ffc0c230_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
943e507727c7e35126b29f76ffc0c230_NEIKI
-
Size
1004KB
-
MD5
943e507727c7e35126b29f76ffc0c230
-
SHA1
b70ace9118cf1674e0b4ec75c192708407d34408
-
SHA256
79dd70040043320e380ca85155220737139f82bef5a8ec5807651480f7fc2667
-
SHA512
328794764b21eb1ad3222378da0dd2c5c962be026987c005c508cfb0ad7bcf3db9f04d564c471282a65acc67d70a87861564d76eaf1071ece7281ebfc801406c
-
SSDEEP
24576:Aw5mITym3oekARJlEtOBq4o7uoCevcJbSSHL:ADITym4ekOJScBq4MTvcJbSSHL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 943e507727c7e35126b29f76ffc0c230_NEIKI
Files
-
943e507727c7e35126b29f76ffc0c230_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 952KB - Virtual size: 951KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ