GetHandleVerifier
Behavioral task
behavioral1
Sample
a9ff33548bf62453c28c7c5856a6bf60_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9ff33548bf62453c28c7c5856a6bf60_NEIKI.exe
Resource
win10v2004-20240426-en
General
-
Target
a9ff33548bf62453c28c7c5856a6bf60_NEIKI
-
Size
696KB
-
MD5
a9ff33548bf62453c28c7c5856a6bf60
-
SHA1
f4a15be98b313f3fdb2b09d69f587803de1dbf57
-
SHA256
1a1f0bd0b21e38fa7fc7faba36ab5e45bb27d7ba3d504f1aab7e569851cc33c2
-
SHA512
1fc7909a45743910ddc56b12239647cb161e810acbe3aed1594f20094303499dc5a91e460b6b7710b05c2bb533c35fc64b86992c612f12e9bdb029735925453f
-
SSDEEP
6144:DuNRac6F2GyZr+TGr8Mi5EKuqR1CjrATB/HnusXEi8L2dzc1kx5pTnnuCoM/X1Jt:yNRa7do44jkTJHLEXtctnUktfGm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9ff33548bf62453c28c7c5856a6bf60_NEIKI
Files
-
a9ff33548bf62453c28c7c5856a6bf60_NEIKI.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
UPX0 Size: - Virtual size: 684KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
UPX1 Size: 655KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE