Static task
static1
Behavioral task
behavioral1
Sample
b70207e616a78645c230afbb1e29e790_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b70207e616a78645c230afbb1e29e790_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
b70207e616a78645c230afbb1e29e790_NEIKI
-
Size
868KB
-
MD5
b70207e616a78645c230afbb1e29e790
-
SHA1
97548125bdcc4b61c60beb19c929e18a9ffcb185
-
SHA256
4b32766e006518f1affac8a0bf0441ef90e19662f9422880c8bf5aad6d9bf3b0
-
SHA512
fd2940647e5e96160e539e0f2bc8de890ede33bf8489d9fee9c266cf91bef7a13f9f6f17447a43feb8e2488dedd3efb1f58f6fd0e075079e7262a2751bbe2035
-
SSDEEP
24576:u95zZCGRndMbe6m4ZNXX26FS8BhWT4yKFnOafNlotDN:u9s2
Malware Config
Signatures
Files
-
b70207e616a78645c230afbb1e29e790_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
38:90:10:fa:83:0e:97:84:4a:6e:b2:64:70:2c:97:7cCertificate
IssuerCN=AxiellNot Before13/01/2020, 08:51Not After13/01/2025, 08:51SubjectCN=Axiell54:9c:46:15:c3:46:3a:ba:dc:e0:80:ae:6e:79:f8:fb:5f:11:84:43Signer
Actual PE Digest54:9c:46:15:c3:46:3a:ba:dc:e0:80:ae:6e:79:f8:fb:5f:11:84:43Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 831KB - Virtual size: 830KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ