Static task
static1
Behavioral task
behavioral1
Sample
5f487542daf77898d2d0a1715e28e3f0_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5f487542daf77898d2d0a1715e28e3f0_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
5f487542daf77898d2d0a1715e28e3f0_NEIKI
-
Size
394KB
-
MD5
5f487542daf77898d2d0a1715e28e3f0
-
SHA1
883ec95ca245b3b79daad3df9099613afca9d30f
-
SHA256
f6a7a5a55bfa3b4b40862e632d30966f621017537676e21d550d48fdd53a8700
-
SHA512
4350dadcbdde5a9bafe7dc4e367b452a2776dbf6abfe1b5f5d052a3579a81c0eab6e57ba321e99dc099d162b4117b5a9693856deac05e5d1fee8b171eabfa9e3
-
SSDEEP
3072:hrjEDupIjZfl9C0ppwFy04aBhDO9eYUS0efCskHz8ZBzWWWgWQAfBxe68Zw8ZRya:h/qBve4aXSajHYeWWgWQCBQ/ua
Malware Config
Signatures
Files
-
5f487542daf77898d2d0a1715e28e3f0_NEIKI.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
19:59:48:57:ac:c6:c0:ae:4f:b2:ce:76:7d:23:a7:5eCertificate
IssuerCN=XYZERO-NUC\\NUC 01Not Before26/11/2022, 05:01Not After26/11/2023, 11:01SubjectCN=XYZERO-NUC\\NUC 01f5:3e:f7:c8:19:ed:6d:74:d4:bd:73:ef:90:2c:ad:8b:49:c3:e7:77:c2:f2:6e:c9:8b:ba:c0:e5:24:e8:fc:ebSigner
Actual PE Digestf5:3e:f7:c8:19:ed:6d:74:d4:bd:73:ef:90:2c:ad:8b:49:c3:e7:77:c2:f2:6e:c9:8b:ba:c0:e5:24:e8:fc:ebDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\NUC 01\Documents\Link\PanelMaker V2\PanelMaker\obj\Debug\PanelMaker.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 294KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ