Static task
static1
Behavioral task
behavioral1
Sample
bff688d7aaa15bf4f7915c508d030960_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
bff688d7aaa15bf4f7915c508d030960_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
bff688d7aaa15bf4f7915c508d030960_NEIKI
-
Size
2.8MB
-
MD5
bff688d7aaa15bf4f7915c508d030960
-
SHA1
9fe720cdefd464b4566c8debe5700e6dc0c784b8
-
SHA256
c6c112d3def5240c55dd6c06374f264e51016a99e5311eb03308887b323bf30b
-
SHA512
1e872ca4828b013c0302bebe0b6a8ebfb5f0bb7e2e197348be78ab7a2822760f61d633d9de5830afbaa650d427fdf5246cbe28b085827664410cccb6c46b7198
-
SSDEEP
49152:JwTpAuRUZzpYHedjd51Sl+V8PptD8qe7DlGlDEKAnj6d:JapArpYKj7c8VCtQJ7mld
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bff688d7aaa15bf4f7915c508d030960_NEIKI
Files
-
bff688d7aaa15bf4f7915c508d030960_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 10.0MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 12B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 37B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ