Static task
static1
Behavioral task
behavioral1
Sample
0218a452601f29527e1d08ccc5690be0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0218a452601f29527e1d08ccc5690be0_NEIKI.exe
Resource
win10v2004-20240226-en
General
-
Target
0218a452601f29527e1d08ccc5690be0_NEIKI
-
Size
119KB
-
MD5
0218a452601f29527e1d08ccc5690be0
-
SHA1
2a209198f8e5dfff772bb32b03e7a0e5fbd9cbb0
-
SHA256
be75a038188c24d9f3f7aa9e8bb36c09fc8a9033907bd33ba42883670af74f99
-
SHA512
bcdc8e4bd90e91cdefd702d2730488c73a1ef8d11c9790ac157e55df536f88392203922d9a4146fda193ff5e73e30b7afa651f93d991dba1d1df5afb787afda1
-
SSDEEP
3072:7kW5yJnv6xYGhOKM4suCFoivhwye6dBnypPvb2lG/dpR:7J6ybONRmyFyNbAw1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0218a452601f29527e1d08ccc5690be0_NEIKI
Files
-
0218a452601f29527e1d08ccc5690be0_NEIKI.exe windows:4 windows x86 arch:x86
c59019a4d35a3019508cd976c3967a60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDateFormatA
RegCloseKey
RegisterBadMemoryNotification
QuirkIsEnabled3Worker
AddResourceAttributeAce
WriteConsoleOutputCharacterA
_llseek
OpenConsoleW
SetupComm
GetFileInformationByHandle
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE