App_Web_juk50ik5.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ada35ef6acf7762fb7d12b7826442130_NEIKI.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ada35ef6acf7762fb7d12b7826442130_NEIKI.dll
Resource
win10v2004-20240426-en
General
-
Target
ada35ef6acf7762fb7d12b7826442130_NEIKI
-
Size
47KB
-
MD5
ada35ef6acf7762fb7d12b7826442130
-
SHA1
3f7aa321e0439f2fb1dfd888eaf596ef6ea4ae1c
-
SHA256
7564a4813da9f847e1a260ec5eda253d05d4662bf7f83029a91ee7eeb508836b
-
SHA512
bbe68244fe9054c396ca696cf4c3f936b27cbf618cdcedac715eec8c301e6c72c31c8366c157971d1005b25bb08c44288ecbb5c8dbe4c356c6f764f54e223b1b
-
SSDEEP
768:/Je7JSuhenFrOdfN5spTscMa7Ej7FTDa:/cYOdfN5spTsm7U7FTu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ada35ef6acf7762fb7d12b7826442130_NEIKI
Files
-
ada35ef6acf7762fb7d12b7826442130_NEIKI.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ