Static task
static1
Behavioral task
behavioral1
Sample
beaf1f6f4ccb3ceb0335bbff24d5cc70_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
beaf1f6f4ccb3ceb0335bbff24d5cc70_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
beaf1f6f4ccb3ceb0335bbff24d5cc70_NEIKI
-
Size
3.9MB
-
MD5
beaf1f6f4ccb3ceb0335bbff24d5cc70
-
SHA1
299aeb804fa67bc70dc020c2375807a51b71cb3c
-
SHA256
630018e941224c8b4cd2a44fc391c27810dab3264597443ecae950208b2d3d0f
-
SHA512
9fab2413f49ff87e36c83b10a5c7059011c0ac9cfd150716cf482ff20c66120911da75b3234388861b154af084931428248fa88732185f58d54a120d69f79d62
-
SSDEEP
98304:1kpvXGdpaqJRburfMC5Hu1Exsd+alZsHDU:1uvGdnJArfxPysw
Malware Config
Signatures
Files
-
beaf1f6f4ccb3ceb0335bbff24d5cc70_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
18:6f:e9:59:63:99:23:82:45:28:f1:75:6d:96:40:6eCertificate
IssuerCN=AM\\conklin-1Not Before26/06/2023, 15:02Not After25/06/2024, 21:02SubjectCN=AM\\conklin-1ea:5b:70:6c:a9:7e:53:64:9a:c2:15:c3:d9:73:69:d3:71:66:c6:23:36:fe:c8:3d:42:fb:3b:2b:cb:f0:bc:42Signer
Actual PE Digestea:5b:70:6c:a9:7e:53:64:9a:c2:15:c3:d9:73:69:d3:71:66:c6:23:36:fe:c8:3d:42:fb:3b:2b:cb:f0:bc:42Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Projects\Visual Studio\Blue Ocean\BlueOcean.SAM.Portal\BlueOcean.SAM.Portal\PortalPI\obj\Debug\PortalPI.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 3.9MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ