Static task
static1
Behavioral task
behavioral1
Sample
db63dcc273d77d9b236f13db77913480_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
db63dcc273d77d9b236f13db77913480_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
db63dcc273d77d9b236f13db77913480_NEIKI
-
Size
86KB
-
MD5
db63dcc273d77d9b236f13db77913480
-
SHA1
f2246989757fdc6e014a9ae15a6d84e3c746cdb9
-
SHA256
ac9c266524ce1c9e29eb52fca53506f4acef89a29b44da7c9ee6a0580a0490cf
-
SHA512
26fe33ac3264899596bcd86eedef5225ee0920630e8475adb8b1efa1b46cdfdb43e9ad75d668cd55e121cb42a5e7ce0d9e35025b06f879c6334accaad44f73e0
-
SSDEEP
1536:vAowfbJFgjQ284U+w2EwRz/IUqX514n2222n2n2LIEHuIUH7NOE965UfJ6n56YSJ:vAowVFgjQiUkEwt/XqX514n2222n2n2G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db63dcc273d77d9b236f13db77913480_NEIKI
Files
-
db63dcc273d77d9b236f13db77913480_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE