Static task
static1
Behavioral task
behavioral1
Sample
e385bc8ea6a06af51186bcd962226830_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e385bc8ea6a06af51186bcd962226830_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
e385bc8ea6a06af51186bcd962226830_NEIKI
-
Size
85KB
-
MD5
e385bc8ea6a06af51186bcd962226830
-
SHA1
2ff930c9df71abde21d8c450c85fbf90b29fe211
-
SHA256
16763944d504239e017c92292f8e3acccaad2230ef2cc9b577fe5c6dd67d63dd
-
SHA512
8c7447558acc0fddc57bfe1de0d9c6606441129b7442babb7660db494c2e666ce2534b28ccc8bf49782c5ed446bb2c250ac2550a735cf804039ae81f5873e929
-
SSDEEP
768:eUM/zX1vqX1vLFB5W5pYJIJDYJIJOO6O2lpHiJOP25LqrH5HiJOP25LqrHjjOA:rIWe+eoO6O2lpiMZiMjjV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e385bc8ea6a06af51186bcd962226830_NEIKI
Files
-
e385bc8ea6a06af51186bcd962226830_NEIKI.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 227KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wixburn Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ