Static task
static1
Behavioral task
behavioral1
Sample
cef6564e0fc03f93594c9cf1ddac2910_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cef6564e0fc03f93594c9cf1ddac2910_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
cef6564e0fc03f93594c9cf1ddac2910_NEIKI
-
Size
148KB
-
MD5
cef6564e0fc03f93594c9cf1ddac2910
-
SHA1
adf5f37feb3faf5b38a4a4c15dc66f6651ac20bd
-
SHA256
bdd5da4cc0008e68800841b65233e344b5b3c5571514443010da445e88f1664e
-
SHA512
f1f9bba0ea2c113380742bdb216d7bc6af50251956f2e5609415faec6e71fd3ee1f9ca1adcf78df5f21ed44c2a40aee7f48aefc6c95edd1371c5a3da4750b248
-
SSDEEP
1536:i0p5E2eoCzOVDMCdU2hIMMC1usIxteqTSskmQC+ZqHeLhWqcGcpJroyjt6r:i0o2KzOVAeIMrLqhp1eFWGcpJroy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cef6564e0fc03f93594c9cf1ddac2910_NEIKI
Files
-
cef6564e0fc03f93594c9cf1ddac2910_NEIKI.exe windows:4 windows x86 arch:x86
d13a36f547639bef17979c8704fe1f5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileType
GetTickCount
ReadFile
CloseHandle
GetOverlappedResult
WriteFile
CreateEventA
GetLastError
CreateFileA
LeaveCriticalSection
EnterCriticalSection
SetConsoleTitleA
AllocConsole
FreeConsole
MapViewOfFile
OpenFileMappingA
InitializeCriticalSection
WaitNamedPipeA
Sleep
GetLocalTime
GetCommandLineA
GetVersion
ExitProcess
InterlockedDecrement
InterlockedIncrement
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
ResumeThread
CreateThread
TlsSetValue
ExitThread
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetSystemTime
GetStartupInfoA
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
MultiByteToWideChar
LCMapStringA
LCMapStringW
VirtualAlloc
HeapReAlloc
SetFilePointer
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
user32
SetForegroundWindow
ShowWindow
SendMessageA
FindWindowA
InvalidateRect
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE