Behavioral task
behavioral1
Sample
374702a7d138e49c98169b2edf053bd0_NEIKI.exe
Resource
win7-20240508-en
General
-
Target
374702a7d138e49c98169b2edf053bd0_NEIKI
-
Size
66KB
-
MD5
374702a7d138e49c98169b2edf053bd0
-
SHA1
5f0fab083cc795a9fd793c056c05722a13e7a3cd
-
SHA256
f8eaa33ad33f6d4c5c0896f802276d800231d43cdee80ea022cd96933aab956e
-
SHA512
f2db21813769d78e781f32338601a8b14e1df970df7e9d4ee2d461e50b6c1374f44ca3b7c815e56be5c9bc787a5d21fbb31328008383e83f57a8e42777603940
-
SSDEEP
1536:9vQBeOGtrYS3srx93UBWfwC6Ggnouy8PbhnyLFWoFL07z:9hOmTsF93UYfwC6GIoutz5yLpIz
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 374702a7d138e49c98169b2edf053bd0_NEIKI
Files
-
374702a7d138e49c98169b2edf053bd0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE