Static task
static1
Behavioral task
behavioral1
Sample
ffb50a10e568a51cddd66d7b903caee0_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ffb50a10e568a51cddd66d7b903caee0_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
ffb50a10e568a51cddd66d7b903caee0_NEIKI
-
Size
14KB
-
MD5
ffb50a10e568a51cddd66d7b903caee0
-
SHA1
456d504c5eb44e2799a80d5f0a887be69d8d712e
-
SHA256
629356b058642b8f6763c99a50cdf9ab66712c9ff49af8751abf3936d93d4f7c
-
SHA512
9ea2b3bf5cb1e07be33e6f610d603b30de1edc61a107d96de88febd1aa13ce4f5aaab496e55b9caf3234e975b55f5d063edb8e9262c5a1e27b1507f81f611fc6
-
SSDEEP
192:B6u3n5eFVU0EAzj9zSEGpU7777P3JTC9DS3qDE045HQ47uM7uM7uM7uM:U85eFK01j9OjpWY9DSaDE045H1ZZZZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffb50a10e568a51cddd66d7b903caee0_NEIKI
Files
-
ffb50a10e568a51cddd66d7b903caee0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ