Static task
static1
Behavioral task
behavioral1
Sample
449ef0d6a126677e81e5045a2e552ea0_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
449ef0d6a126677e81e5045a2e552ea0_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
449ef0d6a126677e81e5045a2e552ea0_NEIKI
-
Size
98KB
-
MD5
449ef0d6a126677e81e5045a2e552ea0
-
SHA1
426ef471e45cf3a23100d6fcdb5fd80d4b7d373a
-
SHA256
cf4adf8c8968271b47bd3a6fb0ea5a0551dcb6a4dd90fa8bb89d8e3ed8f96fd0
-
SHA512
90bd5c34352337abfa3a81fc0fbcfc1c2e63c2b8af1858132fb399cfc688f5e0dd2101e54e70d1189c4e23ce26ecd2a3522f1f390861553a780dc5f0c1e42069
-
SSDEEP
3072:u2bPVlKnQMeEP+8vIjBWpi4rELdC/T5b0:uiKLt+8viBWpTALc0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 449ef0d6a126677e81e5045a2e552ea0_NEIKI
Files
-
449ef0d6a126677e81e5045a2e552ea0_NEIKI.exe windows:4 windows x86 arch:x86
96adb4ab5f87a8416c1a1c40010150ef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
LoadIconA
gdi32
GetStockObject
msvcrt
exit
advapi32
RegCloseKey
shell32
ShellExecuteW
ole32
CoInitialize
Sections
.MPRESS1 Size: 91KB - Virtual size: 376KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE