Static task
static1
Behavioral task
behavioral1
Sample
5014eb446eb6433792acef7532389da0_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5014eb446eb6433792acef7532389da0_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
5014eb446eb6433792acef7532389da0_NEIKI
-
Size
1.5MB
-
MD5
5014eb446eb6433792acef7532389da0
-
SHA1
1f41868e0ad033241839ba3996e63a739fa2bed3
-
SHA256
4575957c50863cca0dae5d0b62528b883d7f3d83cf808cd5b06802335f0b6f1d
-
SHA512
c6af402a97267792137c0eacdf2dbcd0554573e51c85b035be7512be1c488df11f2373b5febcd0760c140d5fe173dcd09732a123c7d09a3cf7f1a3a9f1aebb80
-
SSDEEP
24576:IjiMkuEozwNTELveN5ICo6XlxB3LKzvNuTVPckk997LZK58+0IOpKaLYfM:IjikEoKADeNVvlzouZct7dKy+lOpKJ0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5014eb446eb6433792acef7532389da0_NEIKI
Files
-
5014eb446eb6433792acef7532389da0_NEIKI.exe windows:4 windows x86 arch:x86
589d48ed984f9485ea294725b3e3f1f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
MessageBoxA
advapi32
RegFlushKey
oleaut32
SafeArrayCreate
Sections
.MPRESS1 Size: 282KB - Virtual size: 588KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE