applaunch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ecfeab0678e326f1ddb27077a3b8b5d0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecfeab0678e326f1ddb27077a3b8b5d0_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
ecfeab0678e326f1ddb27077a3b8b5d0_NEIKI
-
Size
4.6MB
-
MD5
ecfeab0678e326f1ddb27077a3b8b5d0
-
SHA1
2cbcc8976d481315e2df5eaf96112fe2fcfd59f4
-
SHA256
a434d8766c766845adaf5e7aeb7b1a45a9b2d5a997165d0644b15ed529e7b0fc
-
SHA512
d775c9475a41ecf31d1ca7d7cdf635488f79abea6365d206e75e3ce3f6ffe6aa8b6a6de2e47459268a4d5a457ee1088ddb40b156b5702299ab095ac3162416f7
-
SSDEEP
49152:8/dvDllr/DzvKfNuIhakf8V8y9wSN2cHXinRInRnhfzqTjd:KvDllrDzMcOe86ww2CfzqTx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecfeab0678e326f1ddb27077a3b8b5d0_NEIKI
Files
-
ecfeab0678e326f1ddb27077a3b8b5d0_NEIKI.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ