Static task
static1
Behavioral task
behavioral1
Sample
4d5bb5dc94b105af9036bf1549eb9f30_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4d5bb5dc94b105af9036bf1549eb9f30_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
4d5bb5dc94b105af9036bf1549eb9f30_NEIKI
-
Size
472KB
-
MD5
4d5bb5dc94b105af9036bf1549eb9f30
-
SHA1
178746dfc2f25d2f9507c6e5e4fe6fadf21933c8
-
SHA256
a6d85f438c1e70e0595bd6bd344c42d22650cfad190e2323e7efd85a7bbe0aa0
-
SHA512
3328e1a47a74509f450ea3a68837ecf66992bacc83781b3efee0abdc3b076ffcfc15beabd8646ec9eceaa80ba0b659fc127aaf796dd167e5b6bf42117d798358
-
SSDEEP
3072:s8RinudiP52xx67lLd7iHDoa5498JLoewU9c8AkV9ItV5DHWN:ZkgiPA6RpPa5fLoeP9c8AkQNHq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d5bb5dc94b105af9036bf1549eb9f30_NEIKI
Files
-
4d5bb5dc94b105af9036bf1549eb9f30_NEIKI.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ