Behavioral task
behavioral1
Sample
fbc7d07ca8c657f751bd9a99230d3060_NEIKI.exe
Resource
win7-20240221-en
General
-
Target
fbc7d07ca8c657f751bd9a99230d3060_NEIKI
-
Size
253KB
-
MD5
fbc7d07ca8c657f751bd9a99230d3060
-
SHA1
4db3492f3cf15c3806c7bdc13b31deded6779829
-
SHA256
15162e5aeba140d72fe7408b99cb2fd708adf66a8b5c6fbeee9120cd4ec6459f
-
SHA512
18cdd5cf7ffde84fc243591abb06fe8636dae5ef6ec341adbd401449819e35bbae66ff5987990fd81cf4875cf2a7976aaaca4300eaa5eafb42c6aa8bcdf0101c
-
SSDEEP
6144:kcm4FmowdHoSphraHcpOaKHpolTjZXvEQo9dfrb:y4wFHoS3eFaKHpKT9XvEhdfrb
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbc7d07ca8c657f751bd9a99230d3060_NEIKI
Files
-
fbc7d07ca8c657f751bd9a99230d3060_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tkjdelw Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE