Static task
static1
Behavioral task
behavioral1
Sample
a1b2453396d6e7478f647fa88e762d30_NEIKI.exe
Resource
win7-20240215-en
General
-
Target
a1b2453396d6e7478f647fa88e762d30_NEIKI
-
Size
65KB
-
MD5
a1b2453396d6e7478f647fa88e762d30
-
SHA1
dd53e28db5fac85b5b2006ea46d4d5397b6fae32
-
SHA256
7153c622b6159ffc6d2ef61050af1d222e3c3cafa2293e2727181e5a42d9746d
-
SHA512
0527a30a0c2e213d87d2d5ab98e0b89f235497a04b33383e23554e5714db51827b14c6d48ac29052a7692454861657f7348b3c3baf7a2cf71eb05e9b5c9af1ad
-
SSDEEP
768:Hotc9a/fgzjT7/xRX2KDtkdZNUKj0WwFjBI5AoUdMML9XD7AM6OQSNJnS1CQDzEs:81WpRX5yzUKr6dMMRgSNJn/0t73905I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1b2453396d6e7478f647fa88e762d30_NEIKI
Files
-
a1b2453396d6e7478f647fa88e762d30_NEIKI.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE