applaunch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bbae7013cb25f02788359957e0b76b90_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bbae7013cb25f02788359957e0b76b90_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
bbae7013cb25f02788359957e0b76b90_NEIKI
-
Size
4.5MB
-
MD5
bbae7013cb25f02788359957e0b76b90
-
SHA1
f144cbf497e3aee764ef982080d2750fcf3deaf9
-
SHA256
9c2ca42f864ef3613d216a4c50eeb532382582fa62cb7c819890f178f7dfd4c8
-
SHA512
0007f618e2d6679267cf12305c08b5ba1b29f10d5136e79a07be4bd8e48eb3ee83b4b77e8b12b914d42f19155dacdce886cff749115ee918065dd4a5f715cf5b
-
SSDEEP
49152:8/dvDllxzT2G+JWK+JLxrErF/N9YPlbIW8TJKrOwazQq2YhkEGOivv97:KvDllxNK+JLCNaFE2YFGOep
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbae7013cb25f02788359957e0b76b90_NEIKI
Files
-
bbae7013cb25f02788359957e0b76b90_NEIKI.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ