Behavioral task
behavioral1
Sample
572902c3703f8cd609d82d44a18dc790_NEIKI.exe
Resource
win7-20240215-en
General
-
Target
572902c3703f8cd609d82d44a18dc790_NEIKI
-
Size
96KB
-
MD5
572902c3703f8cd609d82d44a18dc790
-
SHA1
bf223a3a6bdd44071579caff3ebeac461d0f16a1
-
SHA256
2c85b27cc5e7e098ed4f275d9f7e39dcf7c8d44f7a46cf10bc3c45e040f00aff
-
SHA512
ffbe496630676b81df985a71e3a11c787a29305a77f96dad8ec79516ade5d307dd9b8c1df702ec9935664df9c9a7e8eb68a3f46e52a8dd3e6262a6a62aaedfc7
-
SSDEEP
1536:xvQBeOGtrYS3srx93UBWfwC6Ggnouy82F13w801j35b4N4AO3GkP1la0+7:xhOmTsF93UYfwC6GIout03g35bCItQ0G
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 572902c3703f8cd609d82d44a18dc790_NEIKI
Files
-
572902c3703f8cd609d82d44a18dc790_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 104KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE