Behavioral task
behavioral1
Sample
bbe8fd6542c8ea8c9f9effc2eb01bfe0_NEIKI.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
bbe8fd6542c8ea8c9f9effc2eb01bfe0_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
bbe8fd6542c8ea8c9f9effc2eb01bfe0_NEIKI
-
Size
52KB
-
MD5
bbe8fd6542c8ea8c9f9effc2eb01bfe0
-
SHA1
d6af6d996b26d3da83fa0f68bf47cdd854594a3c
-
SHA256
c74be6b7735d39c264fddff3e3b26bfb2809d5f7c42653a85e1c25bcca0008b3
-
SHA512
b6d9914b716f6d5b57c9b4fddafe944d0e9702a432dc7b21cbb059691691d9a861d227c332d005e73bd56015a206bf6b35f43c9e13675e9348ed836c943da54a
-
SSDEEP
768:uCt07c92/EyTAYtxqfGNC0klI7C8y/BYlI5o194jpD:u97wc1aGNC0klI7CP/sIQaJ
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbe8fd6542c8ea8c9f9effc2eb01bfe0_NEIKI
Files
-
bbe8fd6542c8ea8c9f9effc2eb01bfe0_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE