Static task
static1
Behavioral task
behavioral1
Sample
3c632809ca68b17a5b1d822151a4ab10_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3c632809ca68b17a5b1d822151a4ab10_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
3c632809ca68b17a5b1d822151a4ab10_NEIKI
-
Size
236KB
-
MD5
3c632809ca68b17a5b1d822151a4ab10
-
SHA1
c93140d0be513a1a40d600d048e76dc2dd1ccafb
-
SHA256
f8503083063b12f30c58acf97e5e4501bf5f8e51aee0875270c63e3fc0ca26b2
-
SHA512
25f1922a9bd01446ee8caf45643c5b225b3c9297ce7c2a12bf4c2d004a91b8f19fa9d9495bc2d8440107a9d27045bd14d214c21832afd4941ac074df7d32250d
-
SSDEEP
3072:0iORn4gvwrWVQT6BWOyLIXQjbi3R2wEjP0xmECb2OvvELidFhYHiLCtmYyfr3v8O:gVhBOm2rmyGiFhfLlxrf8AEA1rF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3c632809ca68b17a5b1d822151a4ab10_NEIKI
Files
-
3c632809ca68b17a5b1d822151a4ab10_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ