Behavioral task
behavioral1
Sample
34d62273122bc1cefbc426bf32f4fe00_NEIKI.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
34d62273122bc1cefbc426bf32f4fe00_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
34d62273122bc1cefbc426bf32f4fe00_NEIKI
-
Size
627KB
-
MD5
34d62273122bc1cefbc426bf32f4fe00
-
SHA1
8ebd838fd66796ffc68f2e71824a663c5e53a4ae
-
SHA256
a3f9fec5cedc93e834b5aa5f37338d4dca3317fd21720bb56621f7a007009ece
-
SHA512
f137fd3449b711978ae15336cf30299d361f199cb51f79b425c0719b2f3b599b9f3f885aa7291c3a12c0632954308a223be5d802c6d0be53efb92087c5769a3f
-
SSDEEP
12288:VEQoSmx4cP+1bbBc0DSzY649L2vik60OLEgiS87+rSozd5dHnf8ZdM:VY7G13Bc0+Ud9NJ0OLBxTrSG5Zn4M
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34d62273122bc1cefbc426bf32f4fe00_NEIKI
Files
-
34d62273122bc1cefbc426bf32f4fe00_NEIKI.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_BIND
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.g Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kxvu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.psfx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fpugn Size: 512B - Virtual size: 4KB