Behavioral task
behavioral1
Sample
bc850a4ea9632207524bcef886bc8e50_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bc850a4ea9632207524bcef886bc8e50_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
bc850a4ea9632207524bcef886bc8e50_NEIKI
-
Size
134KB
-
MD5
bc850a4ea9632207524bcef886bc8e50
-
SHA1
9a49b58943dd3129b3b16df9fc301232acd9611b
-
SHA256
9ee52f436ea5269ce51add877e0a5adb7d7e129ea323d7734b652d9beca1cbd3
-
SHA512
11b1547ef44bc164785dfb16ce845240f167b86745f3d6a258ef8e254bac9642ac79fd6fc13a56217c08d25b97420b04eae7d07c6f9436a26aa78b185531a285
-
SSDEEP
3072:rSn9VgYa2cFjOQ33f8PfJA+R4NvVwFmrtBjBE:29GrRDnU3JAEwVwUrTlE
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource bc850a4ea9632207524bcef886bc8e50_NEIKI unpack001/out.upx
Files
-
bc850a4ea9632207524bcef886bc8e50_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ