Static task
static1
Behavioral task
behavioral1
Sample
c5c980d6a774f21d08f49ca5e1b17540_NEIKI.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c5c980d6a774f21d08f49ca5e1b17540_NEIKI.exe
Resource
win10v2004-20240508-en
General
-
Target
c5c980d6a774f21d08f49ca5e1b17540_NEIKI
-
Size
212KB
-
MD5
c5c980d6a774f21d08f49ca5e1b17540
-
SHA1
5768e71f9135e7349bd3e206732e97e02a691693
-
SHA256
7c977f19bad71112aa11869d0dff2bd1d7028751a4fa3f76dfbb42d824bab330
-
SHA512
92bd96fc72af945e28d2fb9a8a299ddfee13b34e66cb9d87530293596a787930667b9631e1e0b437f8023eb57b58b568d06363932bb57317513313da8bc7552f
-
SSDEEP
3072:nT7tTvS5suiF2Sx0PeT2zv0+OFWJbc9L:TpO55isdamvlAIbK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5c980d6a774f21d08f49ca5e1b17540_NEIKI
Files
-
c5c980d6a774f21d08f49ca5e1b17540_NEIKI.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 105KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE