Static task
static1
Behavioral task
behavioral1
Sample
d17085c16e465c148cd5eacb058a9220_NEIKI.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
d17085c16e465c148cd5eacb058a9220_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
d17085c16e465c148cd5eacb058a9220_NEIKI
-
Size
43KB
-
MD5
d17085c16e465c148cd5eacb058a9220
-
SHA1
e0b3a2755cbf2b56db4cea3cdd9a64625d01fd29
-
SHA256
1956d3011a03d3e889053246f31b54832b45cad2e5bcb7259e9de20374013c4d
-
SHA512
c97bd52bff817d35d5c854a31f939d9d064d8bcb34000c3a1e14b4a0e7e25a4451de89f7a6b8e2318e2739ce903433f1c652f340d72ceb1864367c10e45cf136
-
SSDEEP
768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGVAQvHG:RUNHFKQbIkHvGkAYG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d17085c16e465c148cd5eacb058a9220_NEIKI
Files
-
d17085c16e465c148cd5eacb058a9220_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 768B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE