Static task
static1
Behavioral task
behavioral1
Sample
c0f60d16895ce3a95ff38e74813f0470_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c0f60d16895ce3a95ff38e74813f0470_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
c0f60d16895ce3a95ff38e74813f0470_NEIKI
-
Size
749KB
-
MD5
c0f60d16895ce3a95ff38e74813f0470
-
SHA1
35525639454e70ead0cbfa5f7527fc0834e5cb6d
-
SHA256
bc5a9a593422092e3492043594a2b5b4182b0e0052172819fcd7cb75c8c77ea1
-
SHA512
dfa4c49cae3945acd0531e52a7b8783cd8979d2367739cf8c8b72d939806a39b3a53b424c6335d6ee80ae7813bdc98de792aedb12f1cb8299dd55f3ca1918101
-
SSDEEP
12288:DJOXqnlRn0P194OamU7LAh9h10a5W+GrsAg9+eL/u73FWjJg28GuMExMpN2:lO6nH0P1+mAqOPsAgY7sJf8UEKpN2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c0f60d16895ce3a95ff38e74813f0470_NEIKI
Files
-
c0f60d16895ce3a95ff38e74813f0470_NEIKI.exe windows:4 windows x86 arch:x86
f0319b03b75f5d1e87b057a65f738d2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCursor
SendIMEMessageExA
kernel32
GetCommandLineA
Sections
.text Size: 742KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 222B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE