Static task
static1
Behavioral task
behavioral1
Sample
d785e4510d1a65aa6a3fd80ed0cc3f00_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d785e4510d1a65aa6a3fd80ed0cc3f00_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
d785e4510d1a65aa6a3fd80ed0cc3f00_NEIKI
-
Size
760KB
-
MD5
d785e4510d1a65aa6a3fd80ed0cc3f00
-
SHA1
f61e4aa50d928d7e953fbef61291ba79816bc9cf
-
SHA256
3c69836cef0895a88561d4a74ec9d940309c959d350ca754b10a71c0adbf1fab
-
SHA512
404209a03064080459010e84b8b27b6f9b3ce25a6258a261e943fe7f4ed04b818c5d1bec738ee6bc53d2d6e3e5f23e39106c8f884392bb5414841980ba734dce
-
SSDEEP
12288:piPxpIPj92aSOc6zBWYUzHpIPj92aSOc:pysh2ahNzBWYUzah2ah
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d785e4510d1a65aa6a3fd80ed0cc3f00_NEIKI
Files
-
d785e4510d1a65aa6a3fd80ed0cc3f00_NEIKI.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
OeZGWeDm Size: 4KB - Virtual size: 4KB
fkJVOvQR Size: 20KB - Virtual size: 20KB
FoMsSrJp Size: 12KB - Virtual size: 12KB
kwIquPxo Size: 8KB - Virtual size: 8KB
WwonZDDs Size: 4KB - Virtual size: 4KB
IPNZhRfj Size: 4KB - Virtual size: 4KB
VVcMTXyl Size: 4KB - Virtual size: 4KB
VdtUhcgk Size: 4KB - Virtual size: 4KB
yyHNWLZN Size: 80KB - Virtual size: 80KB
AoFYdlJS Size: 412KB - Virtual size: 412KB