Static task
static1
Behavioral task
behavioral1
Sample
1c1700856994c31e6b4b95b1f5961870_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1c1700856994c31e6b4b95b1f5961870_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
1c1700856994c31e6b4b95b1f5961870_NEIKI
-
Size
848KB
-
MD5
1c1700856994c31e6b4b95b1f5961870
-
SHA1
b20a2581e759a1c4d94ebf2bd430a06a0bd063b4
-
SHA256
93a6433a15420a0c40f5dbc437d3754dfdcb0e91a37700a7355d386961e87fdf
-
SHA512
90fa3ecb0891d9df36e894c5f9c00adfb8b19479d6bb5954e622e858cc6e2cb2f7c46568ffccf94bc7e099b505c5c82787b0e51e986748023bda7e383073f792
-
SSDEEP
24576:z2wTMHe3B33dvlHsm/Ps+llRTScMDhFWZeb:NIqndvB+cEUm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c1700856994c31e6b4b95b1f5961870_NEIKI
Files
-
1c1700856994c31e6b4b95b1f5961870_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ