Behavioral task
behavioral1
Sample
06528327fa7c256d03e13f22257b9a40_NEIKI.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
06528327fa7c256d03e13f22257b9a40_NEIKI.dll
Resource
win10v2004-20240508-en
General
-
Target
06528327fa7c256d03e13f22257b9a40_NEIKI
-
Size
192KB
-
MD5
06528327fa7c256d03e13f22257b9a40
-
SHA1
f45b9cec76ee4609f5eeedb4338710e195a2cf40
-
SHA256
9c64968e605b4ae7256b76e08488f1e60f9ca2c1ae4504c553f5083a24758e15
-
SHA512
7385d20c459d67147f87e2cfb9ecd4a4088de68cc737f16676e9079dcf1aa0532d0412fc6f29750f70a2a5c9eacf02f0d9c143302b17634e4942fc894f91d175
-
SSDEEP
3072:480J8IMILmCa3yx6oFEdgVXnFtdbgKgfxm3:4okmCaiEoFEd+Fnkxm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06528327fa7c256d03e13f22257b9a40_NEIKI
Files
-
06528327fa7c256d03e13f22257b9a40_NEIKI.dll windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
UPX0 Size: - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE