Static task
static1
Behavioral task
behavioral1
Sample
aa6dc25d7d1c83263c14ce23287b4020_NEIKI.exe
Resource
win7-20231129-en
General
-
Target
aa6dc25d7d1c83263c14ce23287b4020_NEIKI
-
Size
146KB
-
MD5
aa6dc25d7d1c83263c14ce23287b4020
-
SHA1
303676a386609a3ceee47aa9fda1e791851ae06a
-
SHA256
36153dca08f972452dbcee3997ab8d9b2cd42290b6fcfdcfdef18d8b0595dc5b
-
SHA512
8d517eadf53f436d4dbf397556c4ae7e8267e7c6111e0c40267f0a6457a857afebd3ec873e14f420ca1e11dcca96f280676d6f730b5dc0a1215bbc123c40c0c2
-
SSDEEP
3072:2BuRR8avmZWXyaiedMbrN6pnoXPBsr5ZrR:LRmISNaPM4loo5Zd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa6dc25d7d1c83263c14ce23287b4020_NEIKI
Files
-
aa6dc25d7d1c83263c14ce23287b4020_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE