Behavioral task
behavioral1
Sample
b0739fdb1e7e53b17ee22febfd2f42d0_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
b0739fdb1e7e53b17ee22febfd2f42d0_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
b0739fdb1e7e53b17ee22febfd2f42d0_NEIKI
-
Size
6.3MB
-
MD5
b0739fdb1e7e53b17ee22febfd2f42d0
-
SHA1
5bfadb5dee421f232e339e867eadfee53cb1a91d
-
SHA256
360e51d8fd5cbb9773a978cdb164badf0b9a1857850deb39cd547859bafeb884
-
SHA512
b7c5c4c7527d8db02ec397770430873c54ef5acf8214bac796a9d55b9b416e7f11ed9dbfc66381a2906e30eb2fa6678f3ff155cb4caa155439ec31d9033b6db0
-
SSDEEP
98304:xJE1xESkC+u9aIbYMzuZ6EOPXuBXkwowX/Qe9iyQFZMqjB3xMGk:xenb3chVO/c0wowPaZMqtBMd
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0739fdb1e7e53b17ee22febfd2f42d0_NEIKI
Files
-
b0739fdb1e7e53b17ee22febfd2f42d0_NEIKI.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 2KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 133KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ