Static task
static1
Behavioral task
behavioral1
Sample
d0f86280944be6da7c9bda9800f99710_NEIKI.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d0f86280944be6da7c9bda9800f99710_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
d0f86280944be6da7c9bda9800f99710_NEIKI
-
Size
6KB
-
MD5
d0f86280944be6da7c9bda9800f99710
-
SHA1
d0a01e06922385f97fe071212378676af2b499f8
-
SHA256
d2789218f4a2d2507e1c59b133959c3dbdcd021d1ef6cca2757816a139d0edc2
-
SHA512
e82f50d6c05d23eb538d70eccfb26536d73317fd839bb686a42e4a38ca594ea63b97ea2de6e7c0067340151872fbdc8cf231f42587185a2af8db7f942d4d164f
-
SSDEEP
192:mxYzxAjHVg9xAdC6ml9mhySWMwalvpAwJhsX:m5VMAEl9sy/ST0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0f86280944be6da7c9bda9800f99710_NEIKI
Files
-
d0f86280944be6da7c9bda9800f99710_NEIKI.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ