Behavioral task
behavioral1
Sample
22a3e82e4546203acf9e73dded8d5e70_NEIKI.exe
Resource
win7-20231129-en
General
-
Target
22a3e82e4546203acf9e73dded8d5e70_NEIKI
-
Size
72KB
-
MD5
22a3e82e4546203acf9e73dded8d5e70
-
SHA1
3824c0ba89ec5da9ef7a40193e701b6a0e0d0423
-
SHA256
bfe3df81f2081acc684de3303d47bf8c13f3d32e5f6e7710c1e8d99689b8a82d
-
SHA512
98459c0bebb92503a3cdcdc30412c6330fccfba05d5de3c6e9b16aea2fbee121e2a3bf3099830b8782cc6ae3697da5a71128268bf548a5e86a7cfe740c1eea86
-
SSDEEP
1536:XqwTwAfdg549YEoFHoNTqbKtTy6ZLqwpK7vKgP6r7JzHuH2Uw+1MdOF:XQ5mlo1oNTqbK7+uavK+6/1uH2Uw+
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22a3e82e4546203acf9e73dded8d5e70_NEIKI
Files
-
22a3e82e4546203acf9e73dded8d5e70_NEIKI.exe windows:4 windows x64 arch:x64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE