Static task
static1
Behavioral task
behavioral1
Sample
b0a96fe6449b5c0a98c9179591cd92c0_NEIKI.exe
Resource
win7-20240215-en
General
-
Target
b0a96fe6449b5c0a98c9179591cd92c0_NEIKI
-
Size
390KB
-
MD5
b0a96fe6449b5c0a98c9179591cd92c0
-
SHA1
0ca21010d7aaf06ee8c1561ef272f370b67016ad
-
SHA256
28ef13c6a8a9ca8912d58cc3ea2df5cce5402d02a5c5a754356ad2bb8fdbb1bc
-
SHA512
ccf0d42bcc94f98da055e7c270c7e0ebdbb8d19800ada7904cf2898a37239d126d80402085e8f786a9247fccfa6d6853cff12ea0eb409c5fff8d47701bf56c0d
-
SSDEEP
6144:WZZSklPeYPyHebhsXvJyfgACsDOjuD7vnb46jshsVt0Et4z0XB:uSklPNsXQfgAC7wvnb46jsh0eEG0x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0a96fe6449b5c0a98c9179591cd92c0_NEIKI
Files
-
b0a96fe6449b5c0a98c9179591cd92c0_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 387KB - Virtual size: 387KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ