Static task
static1
Behavioral task
behavioral1
Sample
33e5f4259693fd424d0cec5b5eb95b10_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
33e5f4259693fd424d0cec5b5eb95b10_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
33e5f4259693fd424d0cec5b5eb95b10_NEIKI
-
Size
576KB
-
MD5
33e5f4259693fd424d0cec5b5eb95b10
-
SHA1
cfd80c37f102d5494b98983512236abbc33181bf
-
SHA256
1b030ac0363f4ba1173bd6f7268b528cfcaa39af444af76ce5056dfbfc1f800d
-
SHA512
3bbbdcf5c6d56708b9d584283d0c82abca8b7a10368b4708d7f3f4d26feb86922a1b69f0cfb4d0f90be9b371e4f0be2595f40eeae9846bebd54e282da7533a11
-
SSDEEP
3072:iCaoAs1k1Pol0xPTM7mBCAdJSSxPUkl3VeFNdAMQTCk/dN92sdNhavtrVdewnAxr:iqDwwl0xPTMiB9JSSxPUKYWdod3lm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33e5f4259693fd424d0cec5b5eb95b10_NEIKI
Files
-
33e5f4259693fd424d0cec5b5eb95b10_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 513KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE