Static task
static1
Behavioral task
behavioral1
Sample
d22f6f9cdd2747d35543d4185893e710_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d22f6f9cdd2747d35543d4185893e710_NEIKI.exe
Resource
win10v2004-20240419-en
General
-
Target
d22f6f9cdd2747d35543d4185893e710_NEIKI
-
Size
164KB
-
MD5
d22f6f9cdd2747d35543d4185893e710
-
SHA1
bd05001cd68b77169f791dc01b94010d17954923
-
SHA256
f5253ccf11d45d45236f3d1e518a788afa956edc91b4eff60fffc46c496c5c15
-
SHA512
907d1d4a67216d9e44f1cab7a1efd847b00a95c54af0a5beacdfe8c5361770585efe38d7b2f6c02883920bbf169e0c85f9a450296e6a7d496993fddb6ce62088
-
SSDEEP
3072:JjnaOOgztVt+Mw3WibWH8RLZDEn5/n6l2ccz/dJEfR:Rna0Zw3WyWH8RLZDE5vhcc7d8R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d22f6f9cdd2747d35543d4185893e710_NEIKI
Files
-
d22f6f9cdd2747d35543d4185893e710_NEIKI.exe windows:1 windows x86 arch:x86
2f8d878a47a535c404fa597730bcdfcc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CertCloseStore
CryptBinaryToStringW
CertFreeCertificateContext
user32
DefWindowProcW
EnableMenuItem
GetClientRect
GetCursorPos
GetDesktopWindow
GetMenu
GetSystemMetrics
GetWindow
GetWindowRect
InvalidateRect
KillTimer
LoadCursorW
LoadIconW
PostMessageW
SendMessageW
SetTimer
SetWindowTextW
SystemParametersInfoW
UpdateWindow
kernel32
CloseHandle
DeleteFileW
GetLastError
GetModuleHandleW
GetProcAddress
GetTickCount
GetVersionExW
LoadLibraryA
LoadLibraryW
VirtualProtect
lstrlenW
GetStartupInfoW
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
gdi32
BitBlt
CombineRgn
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
GetDeviceCaps
SetRectRgn
CreateRectRgn
Sections
AUTO Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DGROUP Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ